New Zealand wants platforms to prove your child is over 16, or lose 10% of global revenue

New Zealand has introduced legislation that would require social media companies to establish that their users are over 16, and would fine them up to a tenth of their worldwide revenue if they fail.

What The Bill Does

Prime Minister Christopher Luxon announced the Online Safety Bill on August 24. It applies to platforms designated as high-risk — Instagram, TikTok, Snapchat and Facebook among them — and requires them to take reasonable steps to check that account holders are aged 16 or above.

The permitted verification methods are broad: existing account information, facial age estimation, digital identity services and formal identification documents.

Platforms would separately be required to assess the risks their services pose and report on how those risks are being reduced.

The penalty for non-compliance is up to 10 per cent of global revenue.

'We simply cannot accept the harm being done to a generation of New Zealand children,' Luxon said. 'Social media is exposing them to harmful content, addictive technology and pressures they are not equipped to deal with and it's affecting their family life, mental health, sleep and education.'

The Design Choice That Matters

It is worth being precise about the mechanism, because it differs from how such measures are usually described.

This is not a prohibition on children. No under-16 is committing an offence by holding an account, and no parent is liable. The obligation falls entirely on the platform, and the offence is failing to take reasonable steps to check.

That structure is deliberate and it is the same one Australia adopted. It avoids the enforcement problem of policing millions of households, and it places the duty on the small number of entities that can actually be fined. It also means the standard is 'reasonable steps' rather than certainty, which is what makes the law workable and simultaneously what will be argued about for years.

The Verification Problem Nobody Has Solved

Age assurance at national scale is genuinely difficult, and the difficulty is not technical squeamishness.

Facial age estimation infers age from an image. It is imprecise near the threshold — the gap between a 15-year-old and a 16-year-old is exactly where the error rate is worst — and accuracy varies across skin tones and ethnicities, which converts a technical limitation into a discrimination problem.

Formal identification works, and creates a different harm: it ends anonymous participation for everyone, including adults, and requires platforms to hold or process identity documents at a scale that makes them attractive targets. Every large identity database eventually leaks.

Digital identity services sit between the two and depend on infrastructure most countries do not have.

There is no option on that list without a serious cost, and the bill delegates the choice to the companies while holding them liable for the outcome.

The Political Arithmetic

The bill may not pass.

New Zealand First, a partner in Luxon's coalition, has said it will not support it. Without that support the numbers are not obviously there, and it is not clear the legislation will secure a majority.

That is a meaningful caveat on all of the above. An introduced bill is a statement of intent, not a law, and this one enters a parliament where one of the government's own partners has already declined.

Where This Sits Internationally

New Zealand is not acting alone, and the timing is not coincidental.

Australia has legislated in this direction. The United Kingdom has moved on age assurance through its own online safety regime. And in the United States, a trial is currently running in Oakland in which 29 states are asking a federal court to order Meta to strip specific design features out of Instagram and Facebook — infinite scroll, autoplay, ephemeral content, beauty filters — on the argument that they were engineered to be addictive to minors.

Two different theories of the same problem are being tested simultaneously. New Zealand's says the answer is keeping children off the platforms. The American litigation says the answer is changing what the platforms do.

They are not equivalent. An age gate leaves the product unchanged for everyone over the threshold, on the premise that the design is acceptable for adults. The American case argues the design itself is the harm.

For India, which has a stricter statutory threshold than either — the Digital Personal Data Protection Act treats anyone under 18 as a child and bans behavioural monitoring and targeted advertising aimed at them — the interest is in whether any of these regimes produces workable verification. India's own rules on that point remain unnotified, and the reason is precisely the problem New Zealand has just handed to the platforms.