Australia's attempt to bar under-16s from social media has not produced the quiet compliance regulators hoped for. Months after enforcement began, young users remain active on the platforms they were supposed to be locked out of, and the government's response has shifted from policy adjustment to legal threat. The eSafety Commissioner, Julie Inman Grant, is reportedly preparing to take Meta, TikTok, Snapchat, and YouTube's parent company to Federal Court, accusing them of failing to comply with the restrictions rather than conceding the law itself may be unworkable.
A Policy Built on Shaky Technical Ground
Age-verification mandates look straightforward on paper but collapse against the realities of how the internet works. Platforms can check birth dates, scan faces, or demand identification, yet none of these methods reliably stop a determined teenager. Virtual private networks, which reroute traffic through servers in other jurisdictions and mask a device's true location, make geographic enforcement close to meaningless. A ban tied to an Australian IP address or app store region can be sidestepped in minutes by anyone willing to install a VPN or create a new account with false information. This is not a loophole unique to Australia; it is a structural weakness in any law that assumes digital borders behave like physical ones.
Shifting Blame to the Platforms
Communications Minister Anika Wells has framed the failure as one of corporate noncompliance rather than legislative design, arguing that eSafety now has the investigative powers needed to build a case against the five companies. Meta has pointed to its own enforcement record, including the removal of accounts it identified as belonging to underage Australians, as evidence that it took the law seriously. The dispute now hinges on a harder question: whether platforms can be held legally responsible for user behavior that circumvents technical safeguards through tools like VPNs, which are legal, widely used, and not designed with any particular country's youth protection law in mind.
Why This Case Matters Beyond Australia
Spain and Indonesia have introduced comparable restrictions, and teenagers there have adopted the same evasive tactics - VPNs, secondary accounts, and falsified ages. A Federal Court ruling in Australia could become a reference point for regulators elsewhere who are weighing whether to tighten enforcement or redesign these laws entirely. It would also test how far courts are willing to stretch platform liability when the circumvention tools in question, unlike illegal hacking software, serve legitimate privacy and security purposes for millions of adult users.
The Privacy Trade-Off Nobody Is Discussing
Stricter identity checks, if courts push platforms toward them, carry their own cost: more personal data collected, stored, and potentially exposed. Robust age verification typically means government ID uploads or biometric scans, creating fresh targets for data breaches and expanding corporate surveillance of all users, not just minors. Digital rights advocates have already signaled unease about trading one harm - unrestricted youth access - for another: a less private internet for everyone. Whether Australia's courts, and the governments watching closely, grapple with that trade-off may determine if this approach spreads or quietly fades.