Roblox Overhauls Safety Protocols Following Regulatory Pressure on Child Privacy

The regulator caught the platform letting adults see child accounts and slide connection requests without any parental consent check, and now Roblox has three months to actually fix it. For parents, young streamers, and anyone with a Roblox grinder in their household, this one deserves a hard look.

The exploit — and what Roblox actually promised

Here's the breakdown, for anyone deep in Roblox worlds who missed the saga. The commissioner's testing earlier this year found adult accounts could still pull up child profiles — handles, interests, the whole social fingerprint — and fire off friend requests on autopilot. Worse, the leak wasn't just inside games. Kids and adults could view each other's posts and reply on the forum layers outside actual gameplay environments. Zero age gate, zero consent flow, nothing.

That's not a minor exploit — that's the entire social stack wide open. The commissioner wasn't mincing words, framing verifiable safety measures as "critical" to Roblox's long-term viability. Translation — get caught doing this again and your Australian chapter might not survive.

To their credit — or rather, under legal duress — Roblox handed over a formal undertaking. The to-do list reads like features that should've shipped ages ago: adults blocked from contacting unknown children without parental consent, under-16 accounts locked private-by-default, and a third-party auditor brought in to vet the age-estimation tech so the company can't "mark their own homework." You probably remember the December 2025 patch that flipped under-16 accounts private, killed direct chat until age estimation cleared, and banned voice chat for the 13-to-15 bracket. This is eSafety saying cool, but not enough — and now we're checking the math.

The 1.7 million kid reality check

Let's talk scale, because this isn't a niche. About 1.7 million Australian kids play Roblox. Commissioner Julie Inman Grant made it crystal clear the stakes are existential — if Roblox breaks this, eSafety goes to federal court. And here's where it gets spicy: Roblox got carved out of Australia's under-16 social media ban because it's classified as a gaming platform. Grant didn't shut the door on pulling it in if regulators decide the social features are the actual dominant purpose.

That's the part Roblox execs should be malding about right now. They've been skating by on the "we're a game" technicality while quietly building what is functionally a social network. That defense has an expiration date stamped all over it.

Why this hits the whole creator economy

This isn't just a Roblox L — it's the same trust reckoning playing out across every platform we live on. The whole industry is scrambling to figure out how to stop users from doing dumb, harmful, or predatory things to each other — whether that's herding into bad trades or DMing a 12-year-old. If you want a wild parallel from the finance world, Bitget just rolled out private CFD copy trading specifically to curb herd-mentality damage — same energy, different sandbox.

So here's the question we should all be sitting with — if Roblox can't even gate basic contact between adults and minors, what else is quietly leaking across the platforms our communities actually call home? And how many more regulators are about to find out the messy way?