Australia Doubles Maximum Penalty for Social Media Age-Restriction Breaches to AUD $99 Million

The Australian government has doubled the maximum financial penalty for breaches of its social media minimum age law, raising the ceiling from AUD $49.5 million to AUD $99 million, according to reporting published on 27 June 2026.

The penalty increase applies to systematic failures by tech companies to prevent users under 16 from accessing their platforms — not isolated incidents, but patterns of non-compliance. That distinction matters operationally: a single underage account slipping through is a different exposure category than a platform demonstrably failing to build or enforce age-verification mechanisms at scale.

The Legislative Foundation

The underlying framework is the Online Safety Amendment (Social Media Minimum Age) Act 2024, which Parliament passed in November 2024 and which amends the Online Safety Act 2021. It established 16 as the minimum age for social media account holders in Australia — one of the more prescriptive thresholds enacted by any jurisdiction to date. The eSafety Commissioner holds regulatory authority over the scheme, including the power to pursue court-ordered fines against non-compliant platforms.

The previous corporate penalty ceiling was approximately AUD $49.5 million, calculated at 150,000 penalty units. Doubling that figure to AUD $99 million puts Australia's maximum sanction for age-restriction failures well above what many comparable jurisdictions currently impose for equivalent offences, though still well short of the turnover-based penalty frameworks used in the EU under instruments like the Digital Services Act.

What Changes in Practice

The mechanics of enforcement remain with the eSafety Commissioner, and the penalty increase does not alter the threshold for what constitutes a breach. What changes is the upper bound of financial exposure for platforms found to have systematically failed their obligations. For major platforms — Meta, TikTok, Snapchat, YouTube — AUD $99 million is a meaningful but not existential number. The deterrence theory here is less about the absolute figure and more about trajectory: regulators in Australia, and increasingly elsewhere, are signalling that fines will scale upward until compliance economics change.

There is a broader pattern worth noting. Regulators globally have moved through a familiar cycle with large tech platforms: initial frameworks with modest penalties, followed by enforcement actions that exposed how little those penalties moved platform behaviour, followed by upward revisions. Australia appears to be running that cycle at a faster clip than most.

The age-verification question is where implementation gets genuinely hard. Determining a user's age with confidence — without creating surveillance infrastructure or unnecessary data-collection burdens — is an open technical problem. The law targets systematic failures, but defining "systematic" in a world where platforms handle hundreds of millions of account creations annually requires regulatory precision that the eSafety Commissioner will need to demonstrate in any enforcement action.

Looking at what this means for the broader regulatory environment: Australia has positioned itself as one of the more aggressive jurisdictions on child online safety, and this penalty revision extends that posture into dollar terms. Whether it materially accelerates platform-side investment in age assurance depends on whether enforcement follows. Legislation and enforcement are not the same thing, and the gap between them is where compliance decisions actually get made inside tech companies.

The revised penalties are on the books. The next meaningful signal will come from whether the eSafety Commissioner moves to test them.