Australia’s Privacy Commissioner Tried, in Vain, to Sound the Alarm on Data Protection During the U16s Social Media Ban Trials

Why It Matters

Ignoring the OAIC’s objections undermines confidence in Australia’s new social‑media age ban and exposes a regulatory gap that could lead to privacy violations and policy backlash.

Key Takeaways

• OAIC warned trial’s privacy claims exceed Australian Privacy Principles
• Final report kept inflated language despite regulator’s objections
• Trial relied on vendor interviews, not technical privacy testing
• Conflict of interest: trial director also leads industry lobby group

Pulse Analysis

The Australian government’s push to enforce a minimum age for social‑media use hinges on technology that can verify a user’s age without exposing personal data. To prove feasibility, the Department of Communications funded the Age Assurance Technology Trial, run by the UK‑based Age Check Certification Scheme. The trial’s promise was to demonstrate that age‑verification can be both effective and privacy‑respectful, a narrative that would justify the ban’s rollout across the nation.

However, the Office of the Australian Information Commissioner (OAIC) repeatedly cautioned that the trial’s language—terms like “privacy‑preserving,” “privacy by design,” and “appropriate data‑handling practices”—was not grounded in a formal assessment against the Australian Privacy Principles. The regulator’s feedback highlighted that the trial never conducted a comprehensive privacy impact assessment, instead relying on vendor‑provided policy documents. This gap, described by experts as “privacy washing,” suggests the trial’s conclusions about data protection are superficial and potentially misleading.

The fallout has broader implications for policymakers, tech providers, and consumers. By sidelining the OAIC’s concerns, the government risks eroding public trust in a policy already criticized for high error rates and limited effectiveness. Industry players may face increased scrutiny and calls for stricter oversight, while privacy advocates push for mandatory impact assessments before any age‑verification system is deployed. The episode underscores the need for transparent, regulator‑led evaluations to ensure that privacy safeguards keep pace with emerging digital enforcement measures.