A policy designed to keep children off social media has instead produced a lesson in the limits of government enforcement. Months after Australia's under-16 social media restrictions took effect, regulators are preparing to sue the very platforms they ordered to comply, arguing that corporate failure, not policy design, explains why so many teenagers remain online.
A Ban That Didn't Hold
The premise behind Australia's law was straightforward: require major platforms to verify user ages and remove minors from their services. The execution has proven far messier. Reports suggest that young Australians have not simply stayed away from Facebook, Instagram, TikTok, Snapchat, and YouTube - some data indicates their activity on these platforms has actually increased since the ban began. That outcome directly contradicts the government's stated goal and has placed the eSafety Commissioner, Julie Inman Grant, under pressure to demonstrate the law has teeth.
According to Communications Minister Anika Wells, the agency is now gathering evidence for a Federal Court case against the five companies, armed with expanded investigative powers. The platforms, for their part, say they have acted in good faith. Meta has pointed to the removal of hundreds of thousands of suspected underage accounts as evidence of compliance. Australian officials reject that framing outright, insisting the shortfall lies with the companies' enforcement, not the statute itself.
Why Age Verification Keeps Failing
The dispute exposes a structural weakness that predates this particular law: verifying a user's age online is technically difficult and easily circumvented. Platforms largely rely on self-reported birthdates, behavioral signals, or third-party verification tools, none of which reliably stop a motivated teenager. Workarounds are neither new nor sophisticated - false birthdates, borrowed identities, and secondary accounts have undermined age gates for years.
What has changed is the growing use of virtual private networks among younger users. A VPN reroutes internet traffic through a server in another location and encrypts it along the way, which can mask a device's apparent location and, in some enforcement models, help a user appear to fall outside a restricted jurisdiction entirely. For a teenager facing a regional access block, a VPN is a low-cost, widely available tool - and its use among minors in Australia, Spain, and Indonesia suggests that geography-based restrictions are structurally vulnerable to this kind of circumvention.
A Precedent in the Making
If the eSafety Commissioner's case reaches the Federal Court, the ruling will matter well beyond Australia. Spain and Indonesia have introduced comparable restrictions on youth social media access, and regulators in both countries are watching how enforcement unfolds elsewhere. A judgment that holds platforms liable for inadequate age verification could push companies toward stricter identity checks globally - with real consequences for user privacy, since more rigorous verification often means collecting more personal data, not less.
That trade-off sits at the center of the broader digital rights debate. Privacy advocates have already raised concerns that mandatory age verification schemes risk normalizing invasive identity checks for all users, not just minors. Meanwhile, defenders of unrestricted VPN access argue that the tools serve legitimate privacy and security purposes far beyond evading content rules, and that penalizing their use could set an uncomfortable precedent for digital freedom more broadly.
What Comes Next
No lawsuit has been filed yet, and the targeted platforms have not publicly responded to the reports. But the political stakes are rising. Having framed the ban as a signature child-safety measure, the Australian government cannot easily walk it back without political cost - and a court fight may be the clearest path left for it to demonstrate the law has consequences.
- The case would test whether platforms, rather than regulators, bear legal responsibility for enforcement failures.
- A ruling could influence age-verification policy in Spain, Indonesia, and other countries considering similar bans.
- Stricter verification requirements may increase data collection, raising separate privacy concerns.
- Continued VPN use by minors highlights the practical limits of geography-based content restrictions.