Australia's attempt to bar under-16s from social media has run headlong into the limits of what regulation can actually accomplish online. Months after the restrictions took effect, teenagers remain on the platforms the law was designed to keep them off, and some evidence suggests their engagement has not diminished at all. Now the eSafety Commissioner is reportedly preparing legal action against Facebook, Instagram, TikTok, Snapchat, and YouTube, arguing that noncompliance, not flawed policy design, explains the failure.
A Policy Built on Shaky Technical Ground
Age-verification mandates sound straightforward in parliamentary debate but are notoriously difficult to enforce in practice. Platforms can check birthdates, scan for behavioral signals, or require identity documents, yet none of these methods reliably stop a determined teenager. Virtual private networks let users mask their location and bypass geographic restrictions entirely, while dummy accounts and borrowed credentials defeat identity checks without much technical skill. Australia's regulators appear to have underestimated how quickly young users adapt to circumvention tools that were originally built for entirely different purposes, from securing public Wi-Fi connections to accessing region-locked streaming content.
Who Bears Responsibility: Platforms or Policy?
Communications Minister Anika Wells has placed blame squarely on the tech companies, insisting the law itself is sound and that platforms simply are not complying. Meta disputes that framing, pointing to its removal of hundreds of thousands of suspected underage accounts as evidence of good-faith enforcement. This dispute matters because it will shape the legal theory behind any eSafety lawsuit: is the claim that platforms failed to build adequate detection systems, or that they tolerated circumvention they could have stopped? The distinction carries real consequences for how courts assess liability and for what remedies might follow, from fines to mandated technical changes.
Why Other Countries Are Watching Closely
Spain and Indonesia have introduced their own youth access restrictions, and in both cases, teenagers have turned to the same evasion tactics seen in Australia. A court ruling in Canberra would not bind other jurisdictions, but it would offer the first substantial legal test of whether platforms can be held liable for users who actively work around stated restrictions. Governments weighing similar measures will be studying the outcome, particularly since VPN use is legal in most democracies and difficult to distinguish from legitimate privacy practices. Any ruling that treats VPN access itself as evidence of platform negligence could set an uncomfortable precedent for digital rights more broadly.
The Privacy Trade-Off Nobody Is Discussing
Stricter age verification almost always means more identity disclosure. Document uploads, biometric scans, and government ID checks create new data repositories that are themselves attractive targets for breaches, and they shift the burden of proof onto users rather than platforms. Privacy advocates have grown increasingly uneasy watching child-safety legislation become a vehicle for expanded surveillance infrastructure, since the same verification systems built to block minors could later be repurposed or expanded for other forms of monitoring. Australia's experience suggests that heavier-handed enforcement, rather than closing loopholes, may simply push more users toward encrypted tools and anonymization techniques that regulators have even less visibility into.
