Roblox Bows to Australian Regulators Over Child Privacy Failures

Australia’s online safety bureaucracy has issued its latest ultimatum, this time turning its gaze toward the blocky, virtual landscapes of Roblox. The gaming behemoth, which boasts a user base of nearly 1.7 million Australian children, has legally committed to a comprehensive privacy overhaul. The catalyst for this sudden corporate compliance is an investigation by the national eSafety commissioner, which laid bare a rather glaring security failure: adults were still managing to view children’s profiles and send connection requests without a shred of parental consent.

Testing conducted earlier this year exposed the porous nature of the platform's safeguards. Regulators discovered that outside the immediate game environments, children and adults were freely interacting on forums. In addition, the profiles of minors—displaying account names, interests, and connections—were effectively public property, visible to anyone browsing the platform. Faced with allegations of non-compliance under the Online Safety Act, Roblox has now been given exactly three months to rectify these vulnerabilities. Should the company fail to deliver, the eSafety regulator has made it abundantly clear that federal court action awaits.

To ensure this is not merely an exercise in corporate public relations, the agreement mandates the appointment of a third-party auditor. This independent body will scrutinize Roblox’s safety architecture, placing a particular emphasis on its age-estimation technology. The eSafety commissioner, Julie Inman Grant, justified this external oversight by noting it prevents the company from merely marking its own homework. According to her official statement, “Their executives clearly understand that verifiable safety measures are critical to their long-term viability and success.”

This regulatory intervention follows a familiar pattern of retroactive patching. Just last December, Roblox introduced a raft of restrictions designed to shield young users from grooming, extremism, and violent content. Those measures theoretically made accounts for users under sixteen private by default, disabled direct chat pending age verification, and restricted voice chat capabilities for younger teenagers. Yet, the recent findings suggest these digital fences were easily bypassed. A spokesperson for the platform maintained that dialogues with the regulator have been constructive, insisting the company has historically delivered on its safety commitments.

The broader context of this enforcement action is Australia’s sweeping ban on social media for users under sixteen. Roblox managed to escape that legislative net last year, saved by a technicality that exempts platforms where gaming is the primary function. However, the line between a multiplayer game and a social network is increasingly blurred. Regulators have already signaled that if Roblox’s social features are eventually deemed its dominant purpose, its current exemption could vanish. For now, the company has three months to prove it can police its own virtual borders before the state decides to intervene further.

Written by Sandy van Dongen sandy.vandongen@alpineweekly.com