Australia’s Under‑16 Social Media Ban Stumbles as Platforms Skip Age Verification
What Happened — Independent testers in Australia discovered that major social‑media services (including Facebook, Instagram, TikTok and others) allowed users under the newly‑enforced under‑16 ban to create accounts without any proof of age, effectively bypassing the government‑mandated age‑verification requirement.
Why It Matters for Compliance & Audit Readiness
- Age‑verification is a core control for privacy frameworks (COPPA, GDPR‑Child, Australian Online Safety Act) and maps to SOC 2 CC5 (Privacy) and CC6 (Security) requirements for documented user‑onboarding safeguards.
- The lack of verifiable consent and age‑proof logs creates a gap in audit evidence, exposing organizations to regulatory penalties and audit findings.
- Verisq’s CookiePLUS can embed age‑verification workflows, capture immutable consent records, and feed continuous‑compliance evidence into your SOC 2 audit package.
Who Is Affected – Global social‑media platforms, their advertising partners, and Australian minors whose data may be processed without lawful basis.
Recommended Actions –
- Map the Australian age‑verification rule to SOC 2 privacy controls (CC5) and update your onboarding policy.
- Deploy a verifiable age‑check mechanism (e.g., government‑issued ID, third‑party age‑verification API) and log each verification event.
- Integrate consent capture into a continuous‑monitoring solution to generate audit‑ready evidence.
Source: TechRepublic – Australia’s Teen Social Media Ban Exposes Age Verification Gap
Technical Notes – The issue stems from policy enforcement gaps rather than a software flaw; no CVE is associated. The data at risk includes personally identifiable information (PII) of minors, which is subject to stricter privacy obligations under GDPR, COPPA, and Australian law.