Australia's eSafety Commissioner Set to Gain New Powers

Australia's online safety regulator is moving closer to a significant expansion of its authority. A newly proposed Bill would replace Section 63G of the existing online safety framework with broader investigatory powers for the eSafety Commissioner, while also doubling the civil penalties the regulator can impose on companies that fail to comply with age assurance requirements. For an agency already at the center of Australia's push to keep minors off certain online platforms, this represents a meaningful shift in enforcement muscle.

What the Bill Changes

At the heart of the proposal is the replacement of Section 63G, a provision that currently governs how the eSafety Commissioner can investigate potential violations related to online safety and age verification. The updated framework is designed to give the regulator more direct tools to compel information, examine compliance, and act on suspected breaches without the procedural limitations that critics say have slowed enforcement under the current law.

While the full technical details of the replacement provision have not been made public in granular form, the direction is clear: lawmakers want the eSafety Commissioner to be able to move faster and dig deeper when investigating platforms that may be skirting age assurance obligations. This comes at a time when Australia has already rolled out one of the most aggressive age verification regimes in the world, requiring platforms to prevent users under 16 from holding social media accounts.

Doubling the Civil Penalties

Alongside the investigatory changes, the Bill would double the civil penalties that eSafety can levy against non-compliant companies. Civil penalties are typically the primary lever regulators use to encourage compliance without resorting to criminal prosecution, and a doubling of these amounts signals an intent to make non-compliance considerably more expensive for platforms operating in Australia.

This financial escalation matters because enforcement in the age assurance space has, so far, faced real practical challenges. Reporting on Australia's under-16 social media restrictions has shown that while the number of teen accounts on major platforms has dropped, the underlying age verification systems meant to enforce that policy have struggled to function consistently. If platforms can treat penalties as a minor cost of doing business, the incentive to build robust verification systems weakens. Doubling the civil penalty ceiling is one way regulators hope to close that gap. Readers who followed the rollout of the teen social media restrictions may recall that Australia's teen social media ban has produced a 10% drop in accounts without reliable checks, a result that highlights the tension between policy intent and technical execution.

Privacy Implications of Stronger Age Assurance Powers

Expanding the eSafety Commissioner's investigatory reach raises an important question for everyday internet users: how will stronger enforcement affect the age verification methods platforms choose to deploy? As penalties rise and investigatory powers expand, companies operating in Australia may feel pressure to adopt more invasive or more frequent verification checks, ranging from document uploads to biometric age estimation, in order to avoid regulatory exposure.

That pressure cuts both ways. On one hand, stronger enforcement could push platforms toward age assurance methods that actually work, addressing the gaps identified in earlier rollout phases. On the other hand, it could accelerate the adoption of verification tools that require users to hand over sensitive identity or biometric data, often with limited transparency about how that data is stored, shared, or eventually deleted. Given that the current under-16 ban has already exposed inconsistencies in how age checks are enforced across platforms, an enforcement-heavy approach without clear technical standards risks trading one problem (weak verification) for another (data-hungry verification).

What This Means For You

If you or your family use social media or other platforms subject to Australia's age assurance rules, expect more visible verification prompts as this Bill moves through the legislative process. Companies anticipating tougher investigatory scrutiny and steeper civil penalties are likely to tighten their compliance posture, which in practice often means more frequent identity checks at sign-up or login.

For parents, this could mean more friction when setting up accounts for teens who are old enough to use a platform legally. For adults, it could mean encountering age verification steps on platforms that previously required none, as companies err on the side of caution to avoid regulatory penalties. Anyone concerned about how their identity documents or biometric data are handled during these checks should look for clear privacy disclosures before completing verification, and should be wary of platforms that ask for more information than seems necessary for the task.

Key Takeaways

The proposed Bill is not yet law, but it signals where Australian regulation is heading: a more empowered eSafety Commissioner, backed by steeper financial penalties, tasked with enforcing age assurance rules that have so far had mixed results in practice. As enforcement tightens, users should stay alert to how platforms implement verification, ask questions about data retention when asked to prove their age, and keep an eye on how this legislation evolves as it moves through Parliament. Strengthening oversight is a reasonable policy goal, but the details of implementation will determine whether it protects privacy or simply shifts the burden onto users' personal data.