Australia Online Safety Amendment (Social Media Minimum Age) Act 2024

Age-restricted social media platforms must take reasonable steps to prevent Australians under 16 from holding accounts, with penalties up to AUD 49.5 million enforced by the eSafety Commissioner.

JurisdictionAustralia
CategoryPrivacy & Data Protection
StatusActive
Effective date
Latest development

Analysis

The Online Safety Amendment (Social Media Minimum Age) Act 2024 creates a new social media minimum age framework in Australia under which age-restricted social media platforms must take reasonable steps to prevent Australians under 16 from holding accounts, with enforcement by the eSafety Commissioner under the broader Online Safety Act 2021 framework.[legislation.gov.au][Australian Government Department of Infrastructure][eSafety Commissioner]

Key Requirements

  • Reasonable steps standard: The law does not prescribe one fixed technical method; instead, it requires platforms to implement measures that are reasonable in the circumstances to keep under-16 Australians from holding accounts.[OAIC][eSafety Commissioner][eSafety Regulatory Guidance]
  • Penalty exposure: Civil penalties can reach AUD 49.5 million for corporations that fail to comply with the minimum age obligation.[Quinn Emanuel] The underlying penalty architecture is set by the Act’s amendment to the Online Safety Act 2021 and related penalty provisions in that Act.[legislation.gov.au][APH bill digest]

Compliance Challenges

  • Age assurance is technically difficult: Platforms must distinguish between genuine adult users and under-16 users without creating excessive friction, false positives, or privacy risk; eSafety’s guidance emphasizes that no single method will suit every service.[eSafety Regulatory Guidance][OAIC]
  • Privacy-by-design tradeoffs: Stronger age verification can require collecting more personal data, which can increase privacy and data security obligations under Australian privacy law.[OAIC][OAIC Privacy Act overview]

Implementation Best Practices

  • Adopt a risk-based age assurance model: Use a layered approach such as self-declaration, age inference, device or account signals, parental attestation where appropriate, and stronger verification only when risk is higher.[eSafety Regulatory Guidance][OAIC]
  • Minimize personal data collection: Follow privacy-by-design principles so age assurance uses the least intrusive method that still meets compliance objectives.[OAIC][OAIC Privacy Act overview]
  • Maintain evidence of compliance: Keep records showing the rationale for chosen controls, testing, monitoring, escalation, and incident handling so the platform can demonstrate “reasonable steps.”[eSafety Regulatory Guidance][eSafety Commissioner]

Recent Updates

  • Regulatory guidance issued: eSafety published Social Media Minimum Age Regulatory Guidance to explain its expectations for reasonable steps and implementation.[eSafety Regulatory Guidance]

Related Regulations

  • Online Safety Act 2021: The minimum age law is an amendment to the existing Online Safety Act 2021, so enforcement, definitions, and penalties sit within that broader statute.[legislation.gov.au][legislation.gov.au]

Industry Impact

  • Adtech and data teams: Age gating and verification can alter identity data flows, consent models, analytics, and ad-targeting governance because platforms may need to use additional signals to determine age eligibility.[OAIC][OAIC Privacy Act overview]
  • Global policy spillover: Because Australia is among the first jurisdictions to legislate a hard minimum-age model for social media accounts, the law has been watched closely by global platform, privacy, and trust-and-safety teams.[Parliament of Education Office][Quinn Emanuel]

Sources

If you want, I can next turn this into a controls checklist, a RACI, or a gap assessment template for a social media platform.

Recent developments

  • — Social media companies and age‑assurance providers told a Senate inquiry that proposed enforcement amendments—doubling maximum penalties to A$99 million and expanding eSafety’s information‑gathering powers—are premature and raise significant privacy and data‑handling concerns for under‑16 users and their parents[2][11]. (source)
  • — A government‑advisory study found platforms are “stumbling at the very first step” of age‑verification under the new under‑16 ban, indicating that current age‑assurance mechanisms are ineffective and putting pressure on regulators to tighten compliance expectations and technical standards[7]. (source)
  • — Pinsent Masons reports the government plans to double maximum fines for systematic breaches of the social media minimum‑age law and expand eSafety’s enforcement powers, though these changes have been referred to a Senate inquiry amid concern that tougher penalties are being introduced before the original framework has been fully tested[2]. (source)
  • — The Online Safety Amendment (Strengthening Enforcement for the Social Media Minimum Age) Bill 2026 passed all stages in the House of Representatives on 1 July 2026, seeking to increase penalties and investigative powers associated with the 2024 social media minimum‑age amendments, and is now before the Senate for further scrutiny[8][14]. (source)
  • — On 25 June 2026, Prime Minister Anthony Albanese publicly indicated the government is considering ways to strengthen the Online Safety Amendment (Social Media Minimum Age) Act 2024, signalling potential future reforms that could tighten obligations on platforms and refine privacy and data‑protection safeguards[12]. (source)
  • — In its March 2026 response to a Senate report, the government disclosed that about 4.7 million under‑16 accounts were removed or restricted within days of the obligation taking effect in December 2025, highlighting both significant enforcement activity by eSafety and major operational impacts on platforms and users[13]. (source)
  • — An updated government webpage in May 2026 clarifies that age‑restricted social media platforms must take “reasonable steps” to prevent under‑16s from having accounts, face penalties up to A$49.5 million for non‑compliance, and that children and parents are not directly penalised, reinforcing the regulatory focus on platform accountability and privacy‑preserving age assurance[4]. (source)
  • — The Online Safety (Age‑Restricted Social Media Platforms) Amendment Rules 2026, registered on 25 March 2026, refine which services are within scope by tying the “age‑restricted social media platform” definition to features such as recommender systems or logged‑in functionality, narrowing application of the 2024 Act while still requiring robust age‑assurance and data‑protection controls[3][9]. (source)
  • — A January 2026 government fact sheet outlines compliance expectations for the minimum‑age framework, including requirements to detect and deactivate under‑age accounts and to implement age‑assurance methods that minimise data collection, ensure any further use of personal information is strictly optional and consent‑based, and provide transparent privacy notices[10]. (source)
  • — The government’s September 2025 announcement confirms passage of the Online Safety Amendment (Social Media Minimum Age) Act 2024 and a 12‑month implementation window for platforms to roll out age‑assurance systems by December 2025, prompting industry investment in verification technologies and raising early concerns about privacy, data retention, and feasibility of large‑scale age checks[5][15]. (source)

Related regulations

Put it into practice

Browse all regulations · Compliance deadlines · Latest updates