What does Australia's under-16 social media policy require?

It sets a minimum age of 16 for accounts on age-restricted social media platforms, with the obligation placed on companies rather than children or parents.

Why might adults have to prove their age under the ban?

Because companies carry the legal risk, they need a way to tell who is under 16, which means checking everyone on a platform with millions of users, not only teenagers.

What privacy risks come with age assurance methods?

ID checks can expose a name, date of birth, and document number; face estimation requires trusting providers' deletion claims; and behavioral inference means more monitoring of what people do on a platform.

Australia Under-16 Social Media Ban: Privacy Costs After 60 Minutes

Q: Are under-16s or their parents penalized for accessing restricted platforms?

No, reporting indicates there are no penalties for under-16s who access a restricted platform, or for their parents or carers.

Q: What methods can age assurance use?

It can include checking a government ID, using facial age estimation from a selfie or video, or inferring age from account behavior.

Australia's under-16 social media restrictions are drawing fresh scrutiny after CBS's 60 Minutes investigated how they work in practice. In response, Kirra Pendergast, founder of Safe on Social and an adviser to the Australian Age Assurance trial, published a piece titled "We Banned Social Media From Our Children, Not Our Children From Social Media." The source material is brief and does not detail the investigation's findings, so this post does not attempt to summarize them. Instead, it uses the debate to look at a question that matters to anyone who cares about online privacy: what does the Australia under-16 social media ban privacy trade-off look like for ordinary users?

What Australia's under-16 rules require from users

Public information about the policy, drawn from Australian government and eSafety pages, describes a minimum age of 16 for accounts on age-restricted social media platforms. Under that framework, the obligation sits with the companies. Platforms may face penalties of up to $109.2 million AUD if they do not take reasonable steps to prevent under-16s from holding accounts. Reporting also indicates there are no penalties for under-16s who access a restricted platform, or for their parents or carers.

That design has a practical consequence. Because companies carry the legal risk, they need a way to tell who is under 16. For a platform with millions of users, that means checking everyone, not only teenagers. Adults may be asked to prove their age too, which is where the privacy questions begin.

The privacy cost of age assurance

Age assurance is a broad term. It can cover several methods, including checking a government ID, using facial age estimation from a selfie or video, or inferring age from account behavior. Each approach collects something different, and each carries its own risks.

ID checks can expose a name, date of birth, and document number. If a third party stores copies, a breach could link a real identity to an online account.
Face estimation analyzes a person's image to guess an age range. Even if the image is not meant to be kept, users have to trust the provider's claims about deletion.
Behavioral inference relies on activity patterns, which means more monitoring of what people do on a platform.

The key questions for any system are simple: what is collected, who holds it, how long is it retained, and can it be reused for other purposes? Pendergast's role as an adviser on the Australian trial places her inside that conversation, but the source text provided does not say what she concluded about these trade-offs. Readers should look for those details in the original piece rather than assume them.

A fair reading is that there is no zero-cost option. Stronger verification tends to mean more data handling, while lighter checks tend to be easier to get around. Policymakers are balancing child safety goals against the creation of new stores of sensitive personal information.

Why VPNs are part of the enforcement debate

Whenever a country restricts access to online services, attention turns to tools that change a user's apparent location. A VPN routes traffic through a server elsewhere, which can make a connection look like it originates in another country. That is why VPNs regularly appear in discussions about enforcing regional rules, including age limits.

It is worth being precise here. VPNs have many ordinary uses, such as protecting traffic on public Wi-Fi and limiting tracking by network operators. A platform's age check also does not necessarily depend on location alone, since account-level checks follow the user rather than the connection. Still, regulators in several places have viewed circumvention tools as a complication.

For a comparison point, look at how another government has handled the issue. In Russia, a court fined Google over 22 million roubles ($288,000) for distributing VPN services on Google Play, as covered in our report on Russia's fine against Google for VPN apps. The context differs sharply, since that action targeted access to foreign platforms rather than child safety. But it shows one path regulators can take: pressure on the distribution of circumvention tools rather than on users directly.

Could age verification reach other countries

Australia's approach is being watched because it is a national, law-backed minimum age with large penalties for companies. Other governments weighing similar limits will look at whether platforms comply, how many accounts are deactivated, and what problems emerge. Australian authorities have already asked major platforms to report on account deactivations since the rules took effect, which suggests enforcement will be measured and publicly reviewed.

We cannot say from the source material which countries may follow. What is reasonable to say is that any country adopting a similar model will face the same design choice: verify everyone and collect more data, or verify less and accept leakage. Either way, the technical and legal answers will shape what users are asked to hand over.

What This Means For You

If you live in Australia, you may be asked to confirm your age on some platforms. If you live elsewhere, similar requirements could appear in the future. The practical privacy impact depends on the method used and the provider's retention practices.

Read the prompt before you submit anything. Check whether a platform uses an ID upload, a selfie, or a third-party verifier.
Look for statements on deletion and retention, and prefer options that clearly say data is not kept.
Be cautious with scans of identity documents. Share only what is requested, through official in-app flows.
Parents and guardians can discuss the rules with teens, noting that the law places obligations on platforms rather than on young people or families.

Takeaways

The Australia under-16 social media ban privacy debate is not only about children. It is about how much personal data adults and teens must surface to prove who they are online. Before agreeing to any age check, find out what it collects and how long it is stored. Then follow how governments respond to circumvention tools, and compare approaches such as Russia's action against VPN apps to see how different regulators treat VPN access. Understanding those choices now will help you judge similar proposals when they arrive in your own country.