The Australian Model

The Australian Context

Australia enacted the Online Safety Amendment (Social Media Minimum Age) Act 2024 in November of that year, becoming the first democratic government in the world to impose a binding minimum age for social media access with platform-side liability for compliance. The legislation amended Australia's existing Online Safety Act 2021, which had already established an eSafety Commissioner with significant enforcement powers, and built on a regulatory infrastructure that had been developing since at least 2015.

The Australian legislative context differs from the American context in three ways that matter for understanding what the model can and cannot tell other jurisdictions. First, Australia does not have a constitutional equivalent of the First Amendment. The Australian High Court has recognized an implied freedom of political communication derived from the constitution's system of representative government, but this implied freedom is considerably narrower than the US First Amendment and has not been interpreted to protect commercial platform speech in the way that Moody v. NetChoice suggests the First Amendment might. Second, Australia has a history of more active media regulation than the United States, including content classification systems and broadcasters' license conditions that have constitutional validity under the Australian framework. Third, Australia has a smaller social media market and, therefore, somewhat less leverage over global platforms than the European Union, though substantially more leverage than individual US states.

The political dynamics that produced the legislation were similar to those that produced the 91–3 Senate vote on KOSA in the United States: sustained public pressure from parents, documented evidence of platform harms to Australian adolescents compiled by the eSafety Commissioner's office, and media coverage of several high-profile cases involving the deaths of young Australians in circumstances linked to social media content. The Albanese government introduced the bill with bipartisan support, and the opposition Liberal-National coalition supported it. The only organized opposition came from child advocacy organizations that expressed concern about the impact of exclusion from social media on isolated or marginalized young people — the same concern raised about KOSA by the ACLU, but in Australia, made without the First Amendment frame that made it politically decisive in the United States.

What the Act Actually Provides

The Online Safety Amendment Act 2024 has three operative components. Each represents a structural choice that differs from the choices made in the American legislative context, and each has implications for other jurisdictions considering analogous legislation.

The Age Floor

The Act prohibits designated social media services from allowing persons under the age of 16 to hold accounts. This is not a consent-based mechanism, an opt-out mechanism, or a parental permission mechanism. It is a prohibition. A 15-year-old cannot obtain a social media account on a designated service in Australia, regardless of parental permission, regardless of claimed maturity, regardless of the purposes for which the account would be used. The prohibition is categorical.

The designated services at launch include the major platforms — Meta's Facebook and Instagram, TikTok, X (formerly Twitter), Snapchat, and YouTube — with a regulatory determination mechanism allowing the eSafety Commissioner to add or remove services as the landscape evolves. The designation process requires the Commissioner to consider whether a service poses risk to minors, its market penetration among the under-16 population, and whether alternative services exist for the communication functions the service provides.

Platform Liability for Verification

The critical structural feature of the Australian model — the feature that distinguishes it most sharply from prior age restriction legislation globally — is that liability for verification rests with the platform, not with the minor user or the minor's parents. A platform that allows a user under 16 to hold an account is in violation of the Act. The platform's obligation is to take reasonable steps to verify that account holders are 16 or older. The Act does not specify the technical method of verification, delegating the standard-setting function to the eSafety Commissioner.

This liability allocation is the correct one from a regulatory design perspective. Parents cannot verify their children's ages to platforms they do not know their children are using. Minor users have demonstrated over multiple platform generations that age misrepresentation is routine and trivially easy. The platforms are the entities with the data, the verification infrastructure, and the financial interest that created the problem. Placing the compliance obligation with the platforms aligns incentives correctly: platforms must invest in verification because the cost of non-compliance falls on them.

Enforcement Architecture

The eSafety Commissioner has authority to investigate complaints and platform compliance, issue civil penalty orders, and seek injunctions. The maximum civil penalty for systemic non-compliance is AU$50 million — applicable to the platform, not to individual executives. The Act specifies that penalties are to be calibrated to the severity and duration of the violation, the platform's compliance history, and the company's financial position. There are no criminal penalties in the initial legislation, though the government indicated at the time of enactment that criminal penalties for specific officer conduct could be added through subsequent amendment if civil penalties proved insufficient.

Why 16

The choice of 16 as the minimum age threshold is the most debated design element of the Australian legislation, and the debate has revealed substantive disagreements about the purpose the age floor is meant to serve. Understanding those disagreements is necessary for evaluating whether 16 is the right threshold and whether other jurisdictions adopting analogous legislation should use the same threshold or different ones.

The neurological argument for 16 is grounded in adolescent brain development research. The prefrontal cortex — the primary substrate for executive function, impulse control, long-term reasoning, and the evaluation of social comparison information — continues developing through the mid-twenties. The specific developmental phase that spans roughly ages 10–16 is characterized by heightened sensitivity to social comparison, heightened reactivity to social rejection, and reduced capacity to evaluate the cumulative effects of habitual behavior on long-term outcomes. This is the period during which smartphone adoption and social media use have been most strongly correlated with adverse mental health outcomes in the published literature reviewed in the Youth Record series. An age threshold at 16 captures the most acute developmental vulnerability period without extending the restriction into the years when neurological development has substantially stabilized.

The practical argument for 16, as opposed to higher thresholds (17, 18), is that it aligns with the age at which other jurisdictions begin granting legal capacity for a range of consequential decisions. In most Australian states, 16 is the minimum age for employment without parental consent, for driving a learner's permit, and for medical decision-making in certain contexts. A social media minimum age consistent with these existing capacity determinations is legally coherent and politically more defensible than an age threshold that treats social media access as uniquely restricted relative to other activities with comparable risk profiles.

The counter-argument — that 16 is too restrictive and will harm isolated or marginalized young people who use social media as a primary connection to supportive communities — is the most substantive critique of the legislation and was the one that received the most serious treatment in the parliamentary debate. This argument has particular force for LGBTQ+ youth, for young people in geographically isolated areas, and for young people with disabilities whose primary social connections are online. The Act contains no exception for these groups. This is a genuine limitation, not a pretextual one, and it is addressed in Section VI.

The Verification Problem

Age verification at scale is not a solved technical problem. This is not a platform claim designed to excuse non-compliance; it is an assessment shared by independent technologists, privacy researchers, and the eSafety Commissioner's own technical advisory process. Understanding what verification can and cannot do is necessary for evaluating the legislation's implementation prospects and for designing analogous legislation in other jurisdictions.

What Verification Can Do

Age verification can dramatically reduce the number of under-age users who access a platform through the simplest pathways. The majority of under-16 users who currently access social media do so by claiming to be older than they are during signup — entering a false birth date. Adding a verification step — requiring a document-based check, a government ID, a credit card linked to an adult account, or a biometric estimate — substantially increases the cost of age misrepresentation for casual violators. The analogy most frequently invoked in the Australian debate was alcohol purchase verification: the existence of ID checks does not prevent all underage alcohol consumption, but it substantially reduces it.

The empirical basis for this claim is limited because no jurisdiction has yet implemented population-scale social media age verification with a comparable legislative mandate. The closest analogues are adult content sites in the United Kingdom following the Online Safety Act's age verification requirements, where early data suggests verification requirements produce significant reductions in underage access even without technically perfect implementation.

What Verification Cannot Do

Verification cannot be simultaneously comprehensive and private. The technical approaches to robust age verification all involve some form of data collection that creates privacy risks. Document-based verification requires platforms to receive and process government identity documents. Biometric age estimation requires processing facial image data. Credit card verification requires linking a financial record to an account. Each of these approaches creates a database that, if breached or misused, converts an age protection measure into a surveillance instrument.

The Australian Act does not resolve this tension; it delegates it to the eSafety Commissioner's standards-setting process. The Commissioner has indicated that verification standards will require platforms to use the minimum data necessary to establish age, to not retain verification data beyond the period necessary for compliance, and to use privacy-preserving technical architectures where available. This is the correct regulatory approach, but it requires the Commissioner's office to develop technical standards faster than the verification technology ecosystem is maturing.

Early Implementation Record

The Online Safety Amendment Act 2024 became law in November 2024, with a twelve-month implementation period before the age floor and verification requirements took legal effect. As of early 2026, the legislation is in its early enforcement phase. The following observations are drawn from the first implementation year.

Platform responses diverged significantly. Meta announced a phased implementation of its Supervised Experiences framework for under-16 users, which stops short of the Act's requirements but represents a behavioral change the company had previously refused to make. TikTok committed to implementing age estimation technology in Australia before rolling it out in other markets. X's compliance posture was less clear; the company's reduced moderation staffing and stated ideological opposition to content regulation created uncertainty about whether it would implement compliant verification systems on schedule.

The eSafety Commissioner's office released draft technical standards for age verification in April 2025, specifying that platforms must use verification methods that achieve at least a 90% accuracy rate for detecting under-16 users while meeting privacy standards that prohibit retention of verification data. The draft standards attracted extensive comment from platforms, privacy organizations, and child safety advocates. The final standards were published in August 2025 with modifications that extended the 90% accuracy threshold's phase-in timeline but tightened the privacy requirements.

The first enforcement action under the amended Act was taken in November 2025, when the Commissioner issued a formal investigation notice to a platform whose public compliance reporting failed to demonstrate that verification measures were operational. As of early 2026, no civil penalties had been imposed, though the Commissioner's office indicated that penalty proceedings were being prepared in relation to multiple platforms. The enforcement timeline was slower than advocates had hoped and faster than industry had predicted.

Youth mental health data over the first year of implementation showed no statistically significant change attributable to the legislation — a finding consistent with expectations, since the full implementation period had not yet elapsed and the behavioral effects of reduced underage access would not be visible in population health data within twelve months. The absence of rapid improvement is not evidence that the legislation has failed; it is evidence that population health effects of behavioral change operate on longer time horizons than legislative cycles.

The Critiques

The Australian model has attracted criticism from three directions. Each deserves serious treatment because each reveals a genuine limitation of the age floor approach as the primary policy instrument for protecting young people from algorithmic harm.

The Exclusion Critique

The most substantive critique is that the age floor harms the young people most vulnerable to exclusion: LGBTQ+ youth who rely on online communities for identity affirmation and connection to peers in similar circumstances; young people with disabilities whose primary social infrastructure is online; and young people in rural or geographically isolated areas for whom online social networks substitute for social connections that geography makes difficult. These are real groups of real young people for whom the restriction imposes a genuine cost.

The Act does not address this critique. There are no hardship exemptions, no alternative access pathways, and no support structures for young people who lose access to communities that were providing protective functions. This is a legislative design failure, not an argument against age floors in general. A more complete legislative architecture would pair the access restriction with affirmative provision: funded online platforms specifically designed for under-16 users, mental health support infrastructure for young people transitioning off social media, and research programs to identify which uses of social media for which under-16 populations produce net benefit rather than net harm.

The Design Critique

The second critique is that an age floor addresses access but not design — that a 16-year-old on a platform optimized for engagement maximization through dopaminergic manipulation is exposed to the same mechanism of harm as a 15-year-old. This critique is correct as a description of the limitation of any access-restriction-only approach. The age floor is not a substitute for design regulation; it is a complement to it. The Australian legislation's weakness is that it does not pair the age floor with substantive requirements about how platforms must design their products for the users who are permitted to have accounts. The combination of an age floor with the design mandates described in Paper I (LA-001) would be substantially more protective than either alone.

The Jurisdictional Critique

The third critique is that a single jurisdiction's legislation cannot solve a global platform's design choices. Australian law binds Australian operations; it does not change the algorithmic architecture of platforms for users globally. This is true and represents the foundational argument for the treaty framework examined in Paper V (LA-005). The jurisdictional limitation of national legislation is real. It is also not an argument against national legislation, for the same reason that a nation's environmental regulations are not rendered pointless by the existence of emissions in other nations. National legislation sets floors, creates compliance precedents, generates implementation data, and establishes the legal norms that treaty negotiations build on.

What the Model Demands of Other Jurisdictions

The Australian model's primary value for other jurisdictions is not as a template to be copied but as a proof of concept for what binding age-floor legislation requires structurally. Several features of the Australian approach are exportable; several features are specific to the Australian legal and political context.

Platform-side liability is the critical structural feature. Prior age restriction regimes — including COPPA's parental consent framework — placed compliance burden on individual families and, in practice, on children themselves. The COPPA framework's documented failure (as examined in Paper I, LA-001) is substantially attributable to this liability allocation. Legislation that places compliance burden with platforms changes the incentive structure. This is the Australian model's most important contribution and the feature that any analogous legislation in the United States, the United Kingdom, or the European Union must replicate to be effective.

An independent regulatory body with enforcement powers is a prerequisite. The Australian model works — to the extent that it works — because the eSafety Commissioner's office has a mandate, a staff, a technical advisory capacity, and enforcement authority. The FTC's child protection authority in the United States is diffuse, under-resourced, and constrained by legal frameworks that require multi-year enforcement timelines. The EU's enforcement architecture under the Digital Services Act is more powerful but still distributed across member state authorities. Effective enforcement of age floor requirements requires a dedicated authority with expertise in platform design, verification technology, and the behavioral record of specific platforms.

The age threshold requires explicit justification and domestic adaptation. Sixteen may be the right threshold for Australia. It may not be the right threshold for every jurisdiction. The developmental science that supports an age floor supports the general proposition that the 10–16 developmental period represents acute vulnerability to algorithmic manipulation; it does not mandate 16 specifically over 15 or 17. The threshold should be chosen based on the jurisdiction's existing legal capacity frameworks, its political environment, and the specific harm evidence most relevant to its population. Copying 16 without this justification produces a threshold that cannot be defended against legal challenge.

Design regulation must accompany access restriction. The Australian model's limitation — that it addresses the population of users but not the design features that harm them — is not inherent to age floor legislation. It is a consequence of the specific scope of the Australian Act. Other jurisdictions should treat age floors and design mandates as a package, not as alternatives. The combination of a binding age threshold, platform-side verification liability, algorithmic default requirements for permitted users, and monetization restrictions produces a regulatory architecture that addresses the harm mechanism across the entire user population — those below the threshold and those above it who would otherwise be subjected to the same engagement-maximizing design.

Sources and References

• Online Safety Amendment (Social Media Minimum Age) Act 2024 (Cth). Assented to November 28, 2024.
• Online Safety Act 2021 (Cth). Primary legislation establishing the eSafety Commissioner and enforcement framework.
• eSafety Commissioner. "Age Verification Technical Standards: Draft for Consultation." April 2025.
• eSafety Commissioner. "Age Verification Technical Standards: Final." August 2025.
• Australian Government, Department of Infrastructure, Transport, Regional Development, Communications and the Arts. "Explanatory Memorandum: Online Safety Amendment (Social Media Minimum Age) Bill 2024."
• Senate Environment and Communications Committee. "Inquiry into the Online Safety Amendment (Social Media Minimum Age) Bill 2024." Report, November 2024.
• Inman Grant, Julie (eSafety Commissioner). Senate testimony, October 2024.
• Macquarie University Child Development Research Group. "Social Media and Australian Adolescents: Submission to the Senate Inquiry." 2024.
• LGBTIQ+ Health Australia. "Submission to the Online Safety Amendment Bill Inquiry: Protecting Vulnerable Young People While Maintaining Connection." 2024.
• Australian Human Rights Commission. "Statement on the Online Safety Amendment (Social Media Minimum Age) Act 2024." December 2024.
• Office of the Children's eSafety Commissioner (UK). "Age Assurance Standards: Implementation Review." 2024. (UK comparator evidence on verification efficacy.)
• Ofcom (UK). "Children and parents: media use and attitudes report." 2024.
• Royal Children's Hospital Melbourne. National Child Health Poll. "Social Media and Children's Mental Health." 2023.
• Haidt, Jonathan and Rausch, Zach. "The Evidence for Phone-Free Schools." After Babel, 2024.
• Twenge, Jean M. "More Time on Technology, Less Happiness? Associations Between Digital-Media Use and Psychological Well-Being." Current Directions in Psychological Science, 2019.
• Global Kids Online. "Comparative study of age verification approaches across jurisdictions." 2025.
• Access Now. "Age Verification and Digital Rights: A Comparative Analysis." 2024.