- What’s happening: Australia has become the first country to ban under-16s from holding social media accounts, with major platforms now legally required to enforce age checks.
- Why it matters: The law marks a global test case for age assurance technology, platform accountability, and balancing online safety with privacy rights.
- What’s next: Regulators will monitor compliance, legal challenges, and circumvention tactics as other countries watch to see if Australia’s model holds.
Australia has become the first country to enforce a minimum age for social media use. From today, platforms including Facebook, Instagram, TikTok, Snapchat, X, YouTube, Reddit, Threads, Kick, and Twitch must prevent anyone under sixteen from holding an account or face penalties of up to AU$49.5 million.
The requirement, set out in the Online Safety Amendment (Social Media Minimum Age) Act 2024, represents a shift toward ex ante conduct obligations that place responsibility squarely on platforms rather than parents or children.
For regulators worldwide, this is less a finished blueprint than a live experiment in age assurance, privacy-by-design constraints, and enforcement at scale.
Messaging services, educational platforms, health apps, and services such as Discord, Roblox, and YouTube Kids are exempt – a pragmatic choice that still leaves open questions about where policymakers draw the boundary between risky and benign digital environments.
Platforms move from protest to compliance
Even platforms that criticised the bill have begun complying. Meta deactivated under-16 accounts early, removing roughly 500,000 Australian teenagers – 150,000 on Facebook and 350,000 on Instagram – ahead of the deadline. TikTok, Snapchat, and YouTube have rolled out verification layers that include facial estimation, bank-verified age checks, behavioural analysis, and account-history inference.
Several platforms warned the ban could push teens to lesser-regulated services, but all now face weekly compliance reporting before transitioning to monthly updates. The eSafety Commissioner, Julie Inman Grant, has signalled a measured transition period: some platforms will perform well, others less so, and enforcement will scale accordingly.
Age assurance becomes regulatory infrastructure
Behind the ban sits a critical concept: age assurance. It spans identity-document checks, biometric estimation, behavioural analysis, and mixed-signal inference. No single method is mandated, and self-declaration has been ruled out.
The regulatory architecture draws heavily on the government’s AU$6.5 million Age Assurance Technology Trial, which tested more than 60 solutions from 48 vendors. The trial concluded there are no substantial technical barriers to implementing effective age assurance, provided platforms use layered approaches and coordinate verification steps.
Privacy protections are equally central. The Australian Privacy Commissioner, Carly Kind, has emphasised that age verification is not a licence for expanded data collection. Under October guidance, platforms must use necessary and proportionate methods, minimise personal data, delete verification data once used, and may not require government-issued ID as the only option. Privacy-by-design is not aspirational here – it is enforceable.
This creates a dynamic regulatory frontier: how will “reasonable steps” evolve over time? Does a single verification method suffice, or must platforms layer multiple signals? How precise must age estimation be before regulators deem it compliant? These questions will shape not only Australian oversight but also emerging norms abroad.
Politics, courts, and circumvention risks
Implementation did not arrive without dissent.
A Senate committee recommended delaying the rollout, citing proportionality, privacy, and feasibility concerns. But the government proceeded. Public opinion polling shows around 70 to 77 per cent of Australians support the ban, though many doubt it will meaningfully prevent circumvention. More than half expect teens to bypass restrictions through VPNs or falsified credentials.
A High Court challenge filed by two 15-year-olds argues the Act infringes the implied freedom of political communication and imposes disproportionate privacy burdens. The court agreed to hear the case in 2026. The Communications Minister has said the government is prepared to defend the law on behalf of the thousands of parents who sought stronger protections.
The tension between enforceability and practical outcomes is real. If large numbers of teens circumvent controls, the regime may still influence platform behaviour but fall short of its public narrative. If compliance deepens, Australia may establish a de facto global benchmark for age-based access control.
What other regulators should watch
Regulators in Malaysia, New Zealand, and several EU member states are already considering similar models. Australia is the “first domino”, in the eSafety Commissioner’s words, not because the policy is settled but because its results will be highly visible.
What to watch internationally:
The promise:
- Australia has shown that ex ante duties on global platforms are legislatively and politically achievable.
- A dual-regulator model – safety and privacy with separate mandates – provides a way to manage competing goals without overburdening a single agency.
- Treating age assurance as regulatory infrastructure may accelerate technological standardisation.
The caution:
- VPN circumvention, evasion behaviour, and edge-case platforms will test regulatory boundaries.
- Litigation risk: the High Court challenge could reshape the contours of “reasonable steps”.
- Platforms may comply minimally unless regulators articulate a clear, evolving enforcement stance.
- Effective oversight will depend on regulators’ capacity to track evasion tactics and adjust supervision quickly.
For regulators abroad, the significance of Australia’s regime lies precisely in its unfinished state.
The “reasonable steps” standard will be defined through practice, enforcement, reporting behaviour, and possibly judicial review.
Whether it delivers meaningful protection without disproportionate privacy trade-offs will determine whether jurisdictions follow Australia’s lead, adapt its model, or treat it as a cautionary case.
Also read: TMR’s backgrounder on the issue.
