THE ADDRESS AS CIVIC ACT.

There is a document, held originally in the National Archives of the United Kingdom and authenticated for Queensland by the Secretary of State for the Colonies, that still governs the constitutional existence of a state. The Letters Patent of 1859 and the accompanying Order-in-Council are Queensland’s primary founding documents — the legal instrument for the separation of the new colony from New South Wales, and according to the founding documents archive, this document is still ‘live’, the constitutional basis for Queensland today. Queensland Day is celebrated on 6 June every year, the anniversary of Queen Victoria signing those Letters Patent to create Queensland on 6 June 1859. The institutions that grew from that act — courts, hospitals, schools, libraries, universities, emergency services, councils — carry with them a civic weight that did not begin last year and will not end next decade.

That weight demands a corresponding kind of address. Not a commercial URL registered through a foreign registrar on an annual lease. Not a subdomain of a shared government platform subject to the decisions of successive administrations. Something permanent. Something rooted in the place itself — in Queensland, in Brisbane, in the communities these institutions serve. The argument for sovereign digital addresses for Queensland’s public institutions is not primarily a technical argument. It is a civic one.

This essay is concerned with that civic argument: what it means for an institution to hold a digital address that cannot be revoked by a vendor, cannot be redirected by a policy change, and cannot be rendered ambiguous by a change in government structure. It is an argument about the relationship between identity, place, and public trust — and about why the digital layer of that relationship deserves the same seriousness we extend to the physical.

WHAT AN INSTITUTION'S ADDRESS ACTUALLY DOES.

In the physical world, address carries meaning beyond wayfinding. The address of the Supreme Court of Queensland, the address of Queensland Health’s central administration, the address of the State Library on Stanley Place — these are not merely locational facts. They are civic anchors. They tell the public: this institution is here, it is permanent, it is accountable. When a citizen knows where to find a government body, they can approach it, petition it, hold it to account.

The digital address performs precisely the same function, and its failure performs precisely the same harm. When a public institution’s online presence operates under a generic commercial domain — registered through a multinational company’s infrastructure, subject to annual renewal, vulnerable to expiry or administrative error — it introduces a fragility into the public’s relationship with that institution that the institution’s physical address does not share. A court does not periodically take down its building for renewal processing. A hospital does not suspend its street address during a procurement cycle. But under the current architecture of the internet’s naming layer, public institutions routinely face the possibility that their digital presence could be disrupted, redirected, or captured by a third party with no civic standing whatsoever.

Queensland’s digital identity ecosystem, as documented in the Queensland Government’s own enterprise architecture framework, must be able to interact and exchange information with many differing systems across trusted parties — and a lack of interoperability produces silos of identity information and access control, whereby the value of an identity is lost across boundaries. This observation, made in the context of credential verification, applies with equal force to the naming layer. When an institution’s address is not its own — when it is held under terms set by another party — the institution’s identity is not fully sovereign. It can be lost, or at minimum complicated, at boundaries it does not control.

THE FRAGILITY OF BORROWED INFRASTRUCTURE.

The dependence of public institutions on externally controlled digital infrastructure creates a form of what the Lowy Institute describes as “digital colonialism”, whereby external entities dictate both technological and regulatory frameworks in sectors essential to the nation’s economic security. This framing is strong, but it is not imprecise. When a government body’s ability to communicate with citizens depends on the continued goodwill and operational competence of a commercial entity registered in another jurisdiction, something essential about institutional sovereignty has been ceded.

A study published in the International Journal of Law and Information Technology found that Australia has sufficient latitude under its existing trade commitments, and within its current procurement framework, to introduce legitimate and proportionate digital sovereignty measures for the public sector — and that Australian governments and their agencies have expressed concern about various data challenges confronting the Australian public sector, including data sovereignty, supply chain vulnerabilities and cybersecurity threats. The question of where government data is stored is one dimension of this challenge. The question of how government institutions are named and addressed online is another — and it has received considerably less attention.

Across Australia, nearly 94,000 cyber crime reports were made to the Australian Cyber Security Centre in 2022–23 — a 23 per cent increase in one year. Queensland accounted for 30 per cent of these reports, which is disproportionate to its population size, and one in 8 reports nationally related to state or local government entities. These figures, drawn from the Queensland Audit Office’s report on responding to and recovering from cyber attacks, speak to a sector under sustained pressure. The naming layer — the address at which citizens find and trust public institutions — is not incidental to this pressure. A compromised or spoofed address is one of the most effective vectors for fraud, phishing, and the erosion of public confidence. An institution that owns its address in a genuinely sovereign namespace is meaningfully harder to impersonate.

Queensland’s Information Privacy and Other Legislation Amendment Act 2023 introduced state-level breach notification requirements for Queensland public sector agencies, expected to take full effect in July 2026. The legislative response to digital vulnerability is real and evolving. But legislation governing what happens after an incident cannot substitute for infrastructure that reduces the likelihood of an incident in the first place. Sovereign addressing is part of that infrastructure.

QUEENSLAND'S INSTITUTIONAL INHERITANCE.

The first government of Queensland was formed in 1859 when Queensland separated from New South Wales under the state constitution — and since federation in 1901, Queensland has been a state of Australia, with the Constitution of Australia regulating its relationship with the Commonwealth. In the century and a half since that founding moment, the institutions that have grown under Queensland’s governance represent one of the most substantial accumulations of civic infrastructure in the southern hemisphere.

There are 21 Queensland Government departments, each responsible for delivering a portfolio of government legislation and policy. Beyond those departments sit hundreds of statutory bodies, government-owned corporations, health services, universities, local councils, courts, emergency services agencies, and cultural institutions. Brisbane is the centre for most arts ensembles and organisations, including major institutions such as the Queensland Ballet, Opera Queensland, and the Queensland Orchestra. Queensland has a public library system managed by the State Library of Queensland. There are four universities in Brisbane — the University of Queensland, Queensland University of Technology, Griffith University, and Australian Catholic University — and one each in Toowoomba, the Sunshine Coast, Rockhampton, and Townsville.

Each of these entities has a digital presence. Each of that presence is currently addressed through the prevailing infrastructure of the commercial internet — an infrastructure not designed with civic permanence in mind, and not obligated to provide it. The generic-top-level-domain landscape, administered through the multi-stakeholder governance of ICANN and populated largely by commercial registrars, offers no inherent distinction between an institution of public trust and a short-term marketing vehicle. A hospital’s website and an advertiser’s landing page occupy the same naming architecture. They are treated identically by the systems that resolve addresses and by the commercial operators that hold registration authority.

This is not a neutral arrangement. It is a civic problem.

WHAT PERMANENCE ACTUALLY REQUIRES.

The argument for sovereign digital addresses is sometimes misunderstood as a purely technical proposition — a question of which registrar holds a particular domain registration. That is the smallest part of it. The deeper proposition is about the relationship between an institution and its name, and between that name and the public it serves.

Responsible government was established in Queensland by the Letters Patent and Orders-in-Council creating the colony on 10 December 1859, and ministers are individually responsible to the Parliament for the administration of their portfolios, including the acts or omissions of public servants within their departments. The doctrine of ministerial responsibility — the principle that public institutions are accountable to the community through parliamentary oversight — depends in part on the public being able to reliably locate and engage with those institutions. In the digital era, that means their addresses must be stable, unambiguous, and resistant to manipulation.

Australia’s data sovereignty laws are largely governed at the federal level, but certain state laws and guidelines can apply — and some states, such as Queensland and Victoria, have introduced additional cyber security and privacy requirements for government agencies and contractors. Queensland has recognised that the question of where its institutions operate digitally is a question of governance, not merely of technical preference. The next step in that recognition is to extend that thinking from data storage and identity verification to the layer that precedes both: the address layer, the name by which an institution is known and found.

A permanent, place-specific digital address for a Queensland institution is not a cosmetic change. It is a structural one. It severs the institutional name from commercial dependency. It grounds the institution’s online identity in Queensland’s own namespace rather than in a global commercial registry. It makes the address itself a civic artefact — something that belongs to the institution and, through the institution, to the public — rather than a service being rented from a private operator.

Consider what it would mean for Queensland Health’s digital presence, or for the State Library, or for a regional council, to hold an address that cannot expire, cannot be acquired by a third party upon administrative error, and cannot be redirected through the decisions of a registrar with no accountability to Queensland citizens. The address becomes, in that scenario, part of the institution’s infrastructure in the same way its building is — not a service it consumes but a resource it possesses. For institutions whose continuity is itself a civic good, this is not a minor distinction.

THE NAMING LAYER AS PUBLIC INFRASTRUCTURE.

There is a productive analogy with physical infrastructure that is worth dwelling on. Queensland’s road network, its water systems, its electricity grid — these are public infrastructure not because they could not be operated privately, but because their reliability, universality, and permanence are civic requirements that market logic alone cannot guarantee. The same argument applies to the digital addressing layer for public institutions. The question is not whether a commercial registrar can hold a government domain. The question is whether it should — whether the permanent civic identity of a public institution ought to depend on the commercial decisions of a private operator.

In an increasingly digital world, sovereign digital infrastructure is not just a matter of technological capability — it is a matter of national security, economic strength, and strategic independence. This observation, made in the context of broader sovereign infrastructure, applies with particular clarity to public institutions whose legitimacy is inseparable from their identifiability. When a citizen goes online to access health information from Queensland Health, to verify a document from the State Library, to check a planning decision from a local council — the address they use to reach those institutions is the first signal of authenticity. It precedes every other form of verification. It is, in the citizen’s experience, the institution.

The Queensland Government’s own investment in digital identity reflects an understanding of this. On 6 April 2025, the QGov system was replaced by the Queensland Digital Identity system. The Queensland Government describes QDI as “a modern, robust and innovative system which meets the highest national standards and security protocols for digital identities.” The commitment to sovereign, verified digital identity for citizens navigating public services is explicit. The logical extension of that commitment — to the addresses of the institutions themselves — follows directly. If Queensland takes seriously the proposition that a citizen’s identity should be verified, permanent, and sovereign, it should take equally seriously the proposition that an institution’s identity should be the same.

The Queensland Government has announced a significant initiative to create a strong digital identity and verifiable credential ecosystem, marking a major step forward in the digital transformation of the public sector. That ecosystem requires trusted anchors — institutions whose digital addresses are themselves reliable, consistent, and resistant to impersonation. Sovereign namespace addresses for Queensland’s public institutions are those anchors.

THE NAMESPACE AS CIVIC INFRASTRUCTURE.

The project anchored in Queensland’s six top-level domains — .queensland, .brisbane, .goldcoast, .qld, .surfersparadise, and .brisbane2032 — is precisely this kind of civic infrastructure layer. It is not a commercial registry operating alongside the dozens of generic registries already available. It is a place-specific naming layer, built on an onchain identity architecture, that ties a digital address permanently to Queensland’s own civic geography.

What this means in practice is that an institution like the State Library of Queensland, or Queensland Health, or the Brisbane City Council, could hold an address in a namespace that belongs to Queensland — not leased from a global commercial operator, but registered in a permanent, place-anchored layer that cannot be acquired by a party with no Queensland connection. An address such as statelibrary.queensland · health.queensland · brisbane.qld would be, in the fullest sense, a Queensland address — one that carries the weight of place in the same way a physical address on Stanley Place carries it, but that is not subject to the physical constraints of geography, and not subject to the commercial constraints of annual renewal.

The naming layer matters because names are how institutions are found, and being found is how institutions are held accountable. The Queensland Government’s identity approach underpins a digital identity ecosystem encompassing public jurisdictions and private sector delivery partners who trust each other’s assurances of identity — and the ability to readily verify trusted identity information across this ecosystem is key to supporting a seamless digital government as well as allowing Queenslanders to readily use their identity in real world, whole-of-economy use cases. The namespace layer that gives institutions their permanent addresses is the foundation on which that ecosystem of trust rests.

THE CASE THAT CANNOT BE DEFERRED.

Responsible government was established in Queensland by the Letters Patent and Orders-in-Council of 10 December 1859, creating an Executive Council to advise and assist the first Governor, Sir George Ferguson Bowen — and from that first Executive Council consisting of three Ministers, the complexity of government activities has seen the number of portfolios increase continuously to the present. Each iteration of that complexity has required corresponding iterations of civic infrastructure. The telegraph made possible communication across the state’s vast distances; the rail network made possible the movement of people and goods; the telephone made possible the real-time coordination of government services. Each moment of infrastructural transition carried the same question: will Queensland’s institutions be early adopters of the layer that determines access, or will they be late arrivals, fitting their civic needs into an architecture built for other purposes?

The digital addressing layer is that question in its present form. The answer, if Queensland’s institutions are to meet the standard their civic weight requires, is not to continue renting addresses from global commercial operators and hoping the renewal notices arrive. It is to own addresses in a namespace that reflects what Queensland is — a place with a history, with institutions that matter, with citizens whose trust in those institutions depends on their ability to find them, reliably and permanently.

A single point of failure — be it foreign dependence, regulatory misalignment or geopolitical friction — can compromise a nation’s digital sovereignty. For public institutions, a single point of failure in the naming layer can compromise something more immediately felt than national sovereignty: it can compromise the public’s ability to reach the services it relies on, verify the institutions it trusts, and engage with the government it is entitled to hold to account. That is the civic case for sovereign digital addresses. It is the case that Queensland’s institutions — built over more than a century and a half to serve a population that expects them to endure — cannot afford to ignore, and that a permanent onchain namespace anchored in Queensland’s own geography exists precisely to answer.