The revised Cybersecurity Code, established by the eSafety Commissioner, officially took effect on March 9. This regulation mandates that adult content platforms, social media, and generative AI services implement substantive “age verification” technologies, ending the previous practice of merely requiring users to click a verbal declaration stating they are over 18.
The new rules permit platforms to employ multiple verification methods, including facial age estimation, government ID verification, or credit card authorization. Authorities emphasize the core objective is to establish digital barriers preventing minors from accessing extreme violence, pornography, and deepfake content. Industry reactions to these stringent regulations have been mixed. Major platforms like RedTube have opted to block all Australian IP addresses to avoid legal risks. Under the new law, tech companies failing to implement verification mechanisms face hefty fines of up to AUD 49.5 million (approximately 10% of their global annual revenue).
Commentary:
Online age verification ostensibly builds a “digital fence” to protect minors, but in reality traps Australia in a “digital island” predicament. As platforms opt for geo-blocking to evade massive fines, Australian users’ information choice is being eroded. If regulatory pressure forces more multinational tech giants to withdraw, Australia’s online environment risks becoming increasingly closed.
Meanwhile, with the proliferation of VPN technology and advancements in AI deepfakes, tech-savvy teenagers can easily circumvent restrictions or bypass facial recognition. The regulation thus becomes “effective against the virtuous but not the wicked.” When digital defenses constrain law-abiding users yet fail to block genuine risks, they not only burden adult users with privacy concerns and operational complexity but also perpetuate an endless cat-and-mouse game. Is this regulatory framework—structurally sound yet difficult to implement—a safeguard or a burden?