This looks like a voluntary industry code of conduct made by US companies Microsoft, Google etc. I am not aware of any legislation that would require this in Australia. If the commissioner thinks the industry codes are insufficient she might advise the government that a legislative approach is required but she is not an Australian politician and was not elected by anyone here.

The eSafety commissioner is an American born ex-Microsoft, Adobe and Twitter employee who was appointed by the previous conservative government. I wouldn't be so sure her values are representative of the so-called Australian nanny state or the Australian Labor Party.