What does the under-16 social media bill actually require?

It would force social media platforms to implement age verification systems that reliably distinguish users under 16 from adults, and prevent minors from creating or keeping accounts.

Why are age checks raising privacy concerns?

To block under-16s, platforms must collect sensitive identity information from all adult users too, such as ID documents or biometric data, which then has to be stored and secured by the platform or a third party.

How would platforms verify a user's age?

They could use government-issued ID checks, biometric estimation like facial scans, or third-party verification services that confirm age against official records.

NZ Under-16 Social Media Bill: Age Checks Spark Fears

Q: What happens to platforms that do not comply?

They could face penalties linked to their revenue, a structure designed to make non-compliance financially painful even for the largest global companies.

Q: Will the bill become law before New Zealand's November election?

It is uncertain; the bill still needs to move through committee stages, public submissions, and final votes before political attention shifts to campaigning, so its fate depends on parliamentary math and timing.

New Zealand has formally introduced a bill in parliament that would bar anyone under 16 from holding a social media account, backed by strict age verification requirements and penalties tied to a platform's revenue. The Social Media (Age-Restricted Users) Bill has real enforcement teeth on paper, but whether it survives the legislative process before the country's November elections is far from certain. What's clearer, and less discussed, is what this kind of law asks of everyone else who uses social media, not just teenagers.

What the Under-16 Social Media Bill Actually Requires

At its core, the bill would force social media platforms to implement age verification systems capable of reliably distinguishing users under 16 from adults, and to prevent those minors from creating or keeping accounts. Platforms that fail to comply could face penalties linked to their revenue, a structure designed to make non-compliance financially painful even for the largest global companies. The bill is being pushed through as a member's bill within New Zealand's coalition government, which means its fate depends heavily on parliamentary math and timing. With a general election scheduled for November, there's a real question of whether lawmakers can move the bill through committee stages, public submissions, and final votes before political attention shifts entirely to campaigning.

The ambition of the bill is straightforward: keep young teenagers off platforms lawmakers consider harmful to their wellbeing. The mechanism for achieving that, however, is where things get complicated, because verifying that someone is 16 or older generally requires verifying who they are at all.

How Age Verification Systems Collect and Store Personal Data

This is the part of the conversation that often gets lost when a bill is framed purely as "protecting kids." To reliably block under-16s, a platform typically needs some combination of government-issued ID checks, biometric estimation (like facial scans that estimate age), or third-party verification services that confirm a user's age against official records. None of these methods work by only checking the people they're meant to restrict. An adult user, someone well over 16, still has to prove they're not a minor, which usually means handing over identity documents, biometric data, or both.

That creates a much larger dataset than the bill's stated goal implies. Instead of a system that only touches teenagers, age verification infrastructure ends up collecting sensitive identity information from the entire adult user base of a platform, information that then has to be stored, secured, and managed by either the platform itself or a third-party verification vendor. Every additional party handling that data is another potential point of failure, and history has shown that centralized stores of identity documents and biometric data are attractive targets. New Zealand's own Department of Internal Affairs had already flagged these surveillance risks before this bill was even introduced, noting that the regulatory groundwork for age checks was being built ahead of the legislation meant to authorize it.

Comparing New Zealand's Approach to the UK and EU

New Zealand isn't inventing this model from scratch. The UK's Online Safety Act already requires platforms hosting adult content or other age-restricted material to implement "robust" age verification, and the EU's Digital Services Act pushes member states toward similar obligations for platforms accessible to minors. Both frameworks have faced the same core criticism: age verification designed to protect children inevitably requires identity checks on adults too, and neither the UK nor the EU has fully resolved how to do this without expanding data collection and third-party dependency. New Zealand's bill follows this same pattern but adds a distinctly aggressive enforcement mechanism, tying penalties directly to platform revenue rather than flat fines, which could make compliance costs far steeper for major social media companies operating there.

Why VPNs and Privacy Tools Are Entering the Conversation

As age verification requirements spread across jurisdictions, privacy-conscious users, not just minors trying to bypass restrictions, are increasingly looking at tools like VPNs as a way to limit what identity data they hand over to platforms and third-party verification services. A VPN can mask a user's location and network-level identifiers, which matters when age verification systems sometimes rely partly on geographic or IP-based signals alongside document checks. It's worth being clear that a VPN doesn't eliminate the need to submit ID to a platform that requires it, but it does add a layer of separation between a person's browsing activity and their real-world identity, which is exactly the kind of protection people start seeking once they realize how much personal data these systems can accumulate.

What This Means For You

If you're a New Zealand resident, or a user of any platform likely to roll out similar age checks as this trend spreads globally, it's worth paying attention to what data verification actually requires, not just who it's aimed at. Any age verification law, including this one, functions as an identity verification law for everyone once it's implemented at platform scale. Understanding which data a service collects, how long it retains it, and whether a third-party vendor is involved should factor into decisions about which platforms you use and how you protect your own information.

Actionable Takeaways

Stay informed on the bill's progress through parliament, since amendments during committee stages could change verification requirements significantly. Read a platform's privacy policy before submitting ID or biometric data for any age check, and look specifically for how long that data is retained and whether it's shared with third parties. Consider privacy tools like VPNs as part of a broader strategy to limit unnecessary data exposure, not as a way around legitimate age restrictions. And for a deeper look at the surveillance concerns New Zealand's framework raised even before this bill existed, the earlier reporting on the DIA's age verification framework is a useful place to start.