Roblox Agrees to Enforceable Child Safety Measures After Australian Tests Expose Risks

Binding Commitments on Child Protection

Australia's eSafety Commissioner has secured a legally enforceable undertaking from Roblox to strengthen protections against grooming and sexual exploitation on its platform. The intervention follows testing that revealed significant gaps in the company's existing safety measures, including the ability for adult strangers to contact children without parental oversight.

The agreement represents a concrete application of Australia's enforcement powers as regulators push major platforms to comply with the country's child-safety framework, which includes legislation banning social media access for users under 16.

What the Tests Found

According to eSafety Commissioner, testing conducted on the platform uncovered multiple vulnerabilities. Adults could send connection requests to young Australian children without requiring parental consent. Both children and adults were able to interact in forum spaces outside individual games, again without parental approval being necessary. Additionally, children's connection lists, profile information, and other personal data remained visible to other users by default.

These findings raised immediate concerns about the platform's exposure to predatory behavior, particularly given Roblox's massive user base of predominantly young players across Asia-Pacific markets including Australia, Japan, South Korea, and Southeast Asian countries where the platform has seen rapid growth.

Three-Month Implementation Window

Roblox now has three months to implement a series of measures. The company must prevent adults from contacting unknown children without parental consent, switch children's accounts to private settings by default, and improve its complaint reporting systems with clearer notification of outcomes to users who flag concerns.

The California-based company must also engage an independent third-party auditor to evaluate the effectiveness of its safety infrastructure, including the age-estimation technology it relies on to segregate users. This marks the first time eSafety Commissioner has mandated an external safety audit from a technology company operating in Australia.

"Roblox cannot mark their own homework," eSafety Commissioner Julie Inman Grant said, signaling a shift toward independent verification of platform safety claims.

Enforcement Mechanism

The undertaking carries legal weight. If Roblox fails to meet its commitments, eSafety Commissioner can apply to the Federal Court for compliance orders and pursue additional remedies. This enforcement pathway distinguishes the agreement from voluntary industry commitments that have characterized much of the tech sector's approach to child safety in recent years.

Roblox acknowledged the agreement, stating the platform had delivered on commitments made to eSafety over the past year and would continue working toward the shared objective of protecting Australian children online.

Regional Context

The intervention fits within a broader pattern of regulatory action across Asia-Pacific markets. Singapore, South Korea, and Japan have all introduced or strengthened online safety frameworks targeting platforms popular with minors. Australia's approach, combining proactive testing with court-enforceable outcomes, may serve as a template for other jurisdictions weighing how to translate child-safety legislation into measurable platform behavior changes.

For Roblox, which generates significant revenue from Asia-Pacific users through in-game purchases and premium subscriptions, compliance carries both reputational and commercial stakes. The platform's business model depends on network effects, and any erosion of parental trust could affect user growth in the region's key markets.

The three-month deadline and mandatory external audit will test whether the platform can implement meaningful technical changes at scale while maintaining the social features that underpin its appeal to younger users.