Australia’s Failed Social Media Ban Is Building the Internet’s ‘Papers, Please’ Era
Australia’s social media ban for under-16s has been in effect since December 2025. Seven out of ten kids still use social media. The British Medical Journal found “little evidence” of reduced usage. But the law has achieved something else entirely: it has turned age verification into identity verification, forcing millions of users to hand passports and biometric data to third-party apps they know nothing about.
🔍 THE BOTTOM LINE
Australia’s under-16 social media ban fails at its stated goal — keeping kids off platforms — while succeeding at an unstated one: normalizing the surrender of government ID and biometric data as the price of internet access. The Foundation for Individual Rights and Expression (FIRE) warns this is the template spreading globally, and New Zealand is not immune.
What Australia’s Law Actually Does
The legislation, which took effect in December 2025, mandates that social media companies — at risk of massive fines — collect either biometric information, government-issued IDs, or other data to ensure users under 16 are kept logged out. In some cases, platforms can use existing account data to verify age. In most scenarios, they need to verify independently by gathering more user data.
This is where third-party verification tools come in. Snapchat uses k-ID, a UK-based verification service. Users flagged as potentially under 16 are redirected to these third-party apps and asked to provide images of their face or government-issued ID. As FIRE’s Sarah McLaughlin documented, you don’t know much about the verification app — what country it’s based in, what happens with your information, whether you’re protected from hackers or data breaches.
The scenario isn’t hypothetical. Imagine your favourite team scores at the World Cup. You log online to celebrate. The platform’s algorithm wrongly guesses you’re under 16 and forces you through a biometric gauntlet before you can post. Now imagine you’re not posting about sports — you’re criticizing a politician, or discussing abuse, addiction, or medical issues. The “papers, please” approach sounds different when the checkpoint stands between you and your right to speak.
Why It Isn’t Working
The law’s effectiveness is already debunked by the Australian government’s own research. Months after the ban took effect, roughly seven out of ten adolescents were still using social media. A study in the British Medical Journal released this month found “little evidence of immediate substantive reductions in reported social media use by adolescents under 16 years.”
Phones are already banned in Australian schools. The law targets what kids do in their free time — and it has failed to change that behaviour. What it has changed is the data collection infrastructure surrounding every user, adult or minor, who wants to participate in digital life.
The HN discussion (655 points, 303 comments) surfaced a recurring theme: regulation focused on access control rather than education or platform design accountability. Instead of addressing algorithmic addiction or content moderation failures, the government opted for an identity-based blockade that achieves little practical outcome while incurring massive privacy costs.
The Privacy Cost
When a user is presented with two choices — provide your passport scan to a third-party app you cannot vet, or lose access to communication networks — the choice is not free. It is consent under duress.
This model establishes a precedent that participation in modern digital life requires the surrender of core personal identifiers. The third-party verification ecosystem is opaque: users cannot audit the security protocols, data retention policies, or breach history of the services holding their biometric data. A single breach at a verification provider would expose millions of identity documents — a honeypot more valuable than any social media platform’s user database.
For people discussing sensitive topics — political dissent, abuse, addiction, medical issues — mandatory identity verification creates a chilling effect. Anonymity is not just a tool for trolls. It is a shield for whistleblowers, marginalized communities, and anyone whose safety depends on not being identifiable.
NZ Angle
New Zealand’s Privacy Act requires explicit consent for biometric data collection. But age verification mandates redefine what “consent” means when the alternative is total loss of service. Consent under threat of exclusion is not consent — it is coercion dressed in legal language.
NZ’s online safety regulations are still being debated. If Australia’s model crosses the Tasman, Kiwis face the same Hobson’s choice: hand over government ID to use social media, or lose digital access. The Australian AI regulation retreat under Trump pressure shows how quickly regulatory ambition can collide with economic reality. NZ should watch Australia’s failed experiment and choose differently.
The question for lawmakers is not whether children should be protected online — they should be. It is whether the right tool for that protection is a surveillance apparatus that captures every user’s identity, or something more targeted: parental controls at the operating system level, platform accountability for algorithmic harms, and education programmes that address root causes rather than access control.
The Other Side
Proponents of age verification laws argue they are necessary to protect children from grooming, cyberbullying, extremist content, and addictive platform design. The scale of online harm is real and documented. The instinct to act is understandable.
But the proposed solution — mandatory identity verification for all users — is disproportionate, invasive, and technologically brittle. It fails at its stated goal while succeeding at building infrastructure that can be repurposed for purposes far beyond child safety. A government that demands your passport to post on social media today may demand it to read the news tomorrow. The infrastructure doesn’t care about the intent — it only cares that it exists.
❓ FAQ
Does Australia’s law actually keep kids off social media?
No. The government’s own research found seven out of ten adolescents still use social media months after the ban. A British Medical Journal study found “little evidence” of reduced usage.
What data do verification tools collect?
Biometric information (facial scans), government-issued IDs (passports, driver licences), and behavioural data. Users typically cannot audit the security or retention policies of the third-party services holding this data.
How does this affect political speech?
Mandatory identity verification creates a chilling effect for anyone discussing sensitive topics — political dissent, abuse, addiction, medical issues — where anonymity is a safety requirement, not a preference.
Could this happen in New Zealand?
Yes. NZ’s Privacy Act requires consent for biometric collection, but “consent under duress” — comply or lose access — tests the limits of that protection. If Australia’s model spreads, Kiwis face the same trade-off.
Are there alternatives that protect kids without mass surveillance?
Yes. Parental controls at the OS level (already available in iOS and Android), platform-level algorithmic accountability, and targeted education programmes address the root causes of online harm without capturing every user’s identity.
🔍 THE BOTTOM LINE
Australia’s social media ban is a masterclass in regulatory failure: it doesn’t achieve its goal, it costs users their privacy, and it builds infrastructure that can be repurposed for purposes no one voted for. New Zealand should watch, learn, and choose a different path — one that protects children without building a digital checkpoint at the door of the internet.
