Ignoring all the scary censorship things, I thought they'd be some sensible exceptions for this:

Require all website owners to write a risk of harm assessment to the Australian government (the list of required things to say in this assessment is really long)

But there seems to not be:

26A Risk assessments

(1) A person who provides an online service must conduct a written assessment of the risk of harm posed by the service in Australia.

...

Then an 'online service' is defined as:

25A Online services

(1) Each of the following is an online service:

(a) an internet carriage service;

(b) a social media service;

(c) a relevant electronic service;

(d) a designated internet service;

(e) a hosting service;

(f) an internet search engine service;

(g) an app distribution service;

...

Then a 'designated internet service' is defined in the Online Safety Act 2021:

14 Designated internet service

(1) For the purposes of this Act, designated internet service means:

(a) a service that allows end-users to access material using an internet carriage service; or

(b) a service that delivers material to persons having equipment appropriate for receiving that material, where the delivery of the service is by means of an internet carriage service;

but does not include:

(c) a social media service; or

(d) a relevant electronic service; or

(e) an on-demand program service; or

(f) a service specified under subsection (2); or

(g) an exempt service (as defined by subsection (3)).

(2) The Minister may, by legislative instrument, specify one or more services for the purposes of paragraph (1)(f).

Exempt services

(3) For the purposes of this section, a service is an exempt service if none of the material on the service is accessible to, or delivered to, one or more end-users in Australia.

So yeah, all website owners would need to do annual risk assessments, and keep them for at least 6 years, unless your website is not accessible to Australia.

Please lmk if I'm wrong.