The Global Push for Mandatory Age Verification: Privacy and Access at a Crossroads

Governments worldwide are increasingly implementing mandatory age verification laws to restrict minors’ access to social media and digital content. These legislative efforts, which vary from outright account bans to requirements for age-check tools, have sparked significant debate regarding the protection of children versus the fundamental rights to privacy, expression, and digital access for all internet users.

Australia’s Social Media Ban for Minors

In late 2025, the Australian government enacted legislation prohibiting users under 16 from maintaining social media accounts. Under this regime, 10 major platforms—including Instagram, Facebook, Threads, Snapchat, YouTube, TikTok, Kick, Reddit, Twitch, and X—must implement age assurance tools to block access for those under the age threshold. Platforms face potential fines of up to 49.5 million Australian dollars ($32 million USD) for failing to take “reasonable steps” to deactivate accounts held by under-16s or preventing new ones from being created. While platforms have stated their intent to comply, Reddit has challenged the law in Australian courts on constitutional grounds, and researchers have highlighted concerns that the ban restricts teenagers’ access to news.

Regulatory Approaches in the UK and Indonesia

The United Kingdom and Indonesia have adopted distinct regulatory frameworks to limit children’s exposure to digital risks. In the UK, the Online Safety Act, which took effect in mid-2025, mandates that online services assess whether they host content harmful to children. If such content is present, services must implement age checks and adjust algorithms or moderation systems to prevent children from accessing violent imagery or other harmful material. In Indonesia, Communications and Digital Affairs Minister Meutya Hafid announced that accounts for users under 16 on “high-risk” platforms—such as YouTube, TikTok, Facebook, Instagram, Threads, X, Bigo Live, and Roblox—would be deactivated starting March 28. This move positions Indonesia as a notable non-Western nation to delay children’s access to specific digital spaces.

Legislative Developments in Brazil and Malaysia

Brazil and Malaysia are also advancing age-related digital restrictions. Brazil’s 2025 law requires providers of IT products and services likely to be accessed by minors to conduct age checks if their offerings pose risks. While the law is in force, full compliance is expected by early 2027, overseen by the Brazilian National Data Protection Agency. Concerns persist regarding the law’s scope, its impact on free software, and the effectiveness of data protection safeguards. Meanwhile, Malaysia is moving to ban users under 16 from platforms with at least 8 million users in the country. Impacted users are being directed to transfer their data within a one-month window, with platforms facing potential penalties of up to $2.5 million USD for non-compliance.

The European Union’s Digital Identity Strategy

The European Union is exploring a centralized approach to age verification that could have broad implications for privacy. EU politicians are promoting an age verification “app” designed to be interoperable with the Digital Identity Wallet. Critics, including the Electronic Frontier Foundation (EFF), warn that this could lead to long-term tracking and the over-exposure of personal information. The European Commission also supports age verification through initiatives like the Digital Services Act and proposals for “Chat Control,” which could mandate the scanning of private communications. EU Parliament members have proposed a digital minimum age of 16, a position that aligns with European Commission President Ursula von der Leyen’s public support for models similar to Australia’s.

Privacy and Free Speech Implications

Mandatory age verification policies frequently require all internet users to submit sensitive personal data, such as facial scans or government-issued identification, to access online services. This requirement raises significant concerns regarding the collection, storage, and sharing of personal information. Digital rights advocates argue that these measures do not just affect minors; they place a surveillance burden on all users, potentially chilling free expression and undermining due process. As these laws proliferate, the challenge remains balancing the desire to protect young people with the necessity of maintaining an open, private, and accessible internet for everyone.