Apple Navigates New Australian Age-Check Law for Social Media

Australia’s new social media law, effective from December 10, 2023, mandates that major platforms prevent users under the age of 16 from creating accounts. The legislation, which primarily targets social media applications, places significant compliance responsibilities on developers and platforms. As a result, Apple is stepping up its age verification measures within its App Store ecosystem to address these requirements.

The law stipulates that social media apps must deactivate existing accounts held by users under 16 and block new sign-ups from that age group. Violators of this regulation could face fines reaching into the tens of millions of dollars. The eSafety Commissioner has emphasized that platforms should utilize age-assurance tools and behavioral signals rather than mandatory identity checks.

In response, Apple has introduced a compliance toolkit designed for developers, aimed at facilitating adherence to the new regulations. As the App Store serves as a critical intermediary between lawmakers and app developers, it is now pivotal in how these age restrictions are enforced.

Apple’s Compliance Toolkit for Developers

On December 8, 2023, Apple released an update outlining the necessary steps for social media applications operating in Australia. The company clarified that the responsibility for disabling accounts of users under 16 rests with the developers, not Apple. The toolkit includes the Declared Age Range API, which allows apps to determine a user’s age group.

By implementing this feature, developers can manage the experiences of users based on their age. For instance, social apps can prevent users under 16 from creating accounts or log them out while still providing full access to adult users. Moreover, Apple suggests that developers utilize various App Store features to inform users and regulators about age restrictions specific to Australia.

Developers are encouraged to flag their services as unavailable to those under 16 in their App Store descriptions. They must also respond to updated age-rating questions that now require disclosures related to age assurance and parental controls. By raising their app’s minimum age rating above the automatic score generated by Apple’s questionnaire, developers can demonstrate compliance.

Implications for Developers and Future Regulations

Despite Apple’s proactive stance, the onus remains on developers to comply with the Australian law. The company’s message is clear: while it provides the necessary tools, compliance ultimately lies with the developers. Utilizing Apple’s age-range signal may prove more convenient than managing separate identity checks or procuring third-party verification services, particularly for smaller platforms.

However, there are significant trade-offs. The reliance on OS-level age signals may centralize power within Apple while potentially disadvantaging rival app stores. Developers must also trust that Apple’s age estimates will not inadvertently exclude legitimate users. As regulators begin to view Apple’s toolkit as a baseline for compliance, there is a risk that similar requirements could emerge in other jurisdictions.

Critics of the law argue that teenagers may find ways to circumvent these restrictions, using virtual private networks (VPNs) or falsifying information. While Apple cannot completely eliminate these challenges, its response illustrates a willingness to act as an intermediary between regulators and developers. By integrating age checks and compliance mechanisms into its platform, Apple positions itself as a key player in shaping how age verification laws are enforced.

The Australian law may set a precedent, as lawmakers in other regions, including the United States, push for stronger age verification measures. Ultimately, the question remains whether regulators will allow Apple to assume a de facto role as a standards body for age assurance or push back against this model. As the landscape of child safety regulations continues to evolve, Apple’s growing influence in this domain will be closely monitored.