Australia is moving to restrict access to major social platforms for under-16s. The change affects how families, schools and small businesses manage accounts, privacy and online safety. Preparing now reduces disruption and helps protect young people from online risks.
Australia has introduced a law that will prevent children under 16 from using a number of major social platforms from 10 December. Meta, which operates Instagram, Facebook and Threads, says it has begun notifying users it believes are between 13 and 15 years old. Messages inform them that their accounts may be deactivated from early December and provide instructions for saving content. Platforms may ask users to update contact details, provide government ID or complete a video selfie for age checks. If confirmed, platforms will remove accounts they identify as under-age and provide appeal routes for users who can verify their age. Regulators have also signaled fines for platforms that do not take reasonable steps to block under-16s.
The new Australian rules target account access by under-16s on widely used platforms. The immediate impact falls on families with teenage children and organizations that engage with younger users. Platforms commonly used by teenagers include Instagram, TikTok, YouTube, X and Reddit. These services host a wide range of content and interactive features, creating multiple risk vectors for young people.
Common attack paths and exposures in this environment include online grooming, unsolicited direct messages, privacy leaks via shared media, targeted advertising that exploits behavioral data, and third-party apps that collect account information. Teen accounts often contain personal details, location tags, school or workplace names, and friend networks. Those data points can be used for social engineering or identity-based scams.
Technical misconfigurations that increase risk include weak or reused passwords, lack of two-factor authentication, permissive privacy settings, and connected third-party apps with broad access. For institutions, additional risk emerges when student or staff accounts are created using work or school email addresses without adequate consent or oversight. Platforms' age-assurance measures are imperfect; independent reviews have found no single, universally reliable age-check method. That gap means platforms, families and organizations must combine technical controls with clear policies and education.
For families, the change is primarily about safety, continuity and privacy. If a teen's account is closed, they may lose chats, photos and digital memories. Parents should act now to secure important data and reduce exposure to harmful interactions. The law also reframes how parents and guardians manage consent for online services. Platforms may require parental approval or identity proofs; families must balance privacy with the need to verify age lawfully.
Small businesses and SMEs that rely on social platforms for marketing or customer service should prepare for changes to audience demographics and messaging channels. If under-16s are not present on platforms your business uses, advertising strategies and moderation policies may change. Businesses that operate youth-facing services must revisit consent workflows and ensure they do not collect or process personal data of under-age users without lawful parental consent.
Device and app hygiene are central. Encourage families and employees to enable strong authentication, review connected apps, and set tight privacy settings. For schools and organizations, segregate student and staff accounts and restrict use of personal devices for school functions unless consent and data protections are in place. Finally, document consent and parental approvals and keep records to demonstrate compliance with local laws.
Regulators are increasingly focused on limiting underage access to social platforms and tightening age verification. Parallel moves by platforms and gaming services to restrict certain interactions suggest a broader regulatory trend toward protecting minors and requiring stronger age assurance.
Technical fixes alone will not solve the problem. Effective protection combines secure platform settings, verified consent processes, parental involvement and education. Organizations should treat age assurance as a layered control, not a single-point solution.
SPYERA provides lawful, consent-based monitoring tools that assist caregivers and organizations in keeping young people safe online. Our solution offers activity reports, alerting on risky interactions, and remote checks to verify device configurations. For families, SPYERA helps back up communications and identify privacy exposures. For businesses and schools, centralized reporting and configurable alerts support compliance and incident response. Always use SPYERA transparently and in line with local laws; obtain parental consent where required and document approvals.
Preparing now limits disruption and protects young people. Consider using SPYERA to monitor devices lawfully and to gain actionable alerts and reports that support safety and compliance. Use monitoring tools transparently, secure consent where required, and pair technology with conversations about online risks.
