Amendments to Australia’s Online Safety Act 2021 took effect on 10 December 2025, requiring age-restricted social-media platforms to take reasonable steps to prevent Australians under 16 from creating or keeping accounts. The obligation sits with the platform, not with the child or the family. eSafety guidance confirms that under-16 users and their parents or carers face no penalties under the framework.
Companies that fail to meet the standard face civil penalties, though the applicable maximum varies by provision. eSafety’s public guidance cites a figure of up to A$109.2 million, while the regulator’s separate regulatory guidance identifies a maximum corporate penalty of A$49.5 million for the relevant obligation. Readers should be aware that the specific penalty depends on which statutory provision applies in a given case.
The Line Between Social Media and Everything Else
Discord, Roblox, and Gmail all fall outside the current definition.
The framework targets services whose significant purpose is social interaction and that use specific engagement features, including algorithmic recommendation systems, account-based feeds, and visible engagement metrics. Services that do not fit that definition are not covered, and eSafety’s own guidance confirms the exclusions are broad. Those exclusions are also specific: eSafety lists WhatsApp, Messenger, Discord, GitHub, Roblox, Steam, Pinterest, Google Classroom, and YouTube Kids as examples outside the age-restricted category, though service features can change and the list reflects current guidance.
Gmail, as an email service rather than a social-media platform, does not fall inside the existing framework based on the available government descriptions reviewed. Government guidance excludes services whose sole or primary purpose is email, which strongly supports that conclusion.
Where the Gmail Warning Actually Comes From
The available sources do not identify a law, government announcement, or Google statement confirming a Gmail restriction.
The concern circulating about Gmail reflects a possible future expansion of age-based internet controls, not a restriction already in force or formally proposed by Australian authorities. Treating the warning as confirmed policy would misrepresent what the law currently does. The warning is better understood as a signal that the broader debate about age-gating is moving beyond social feeds, raising questions about tracking users that extend well beyond any single platform.
Why Email Poses a Harder Policy Problem
Blocking a social-media account and restricting email access are not the same question.
Email functions as the authentication and communication layer for school enrollment, employment applications, government services, and account recovery across many unrelated platforms. Any restriction on email access for young people would force policymakers to confront questions the existing social-media framework did not need to resolve. Those questions include how to verify age without collecting sensitive identity data, a challenge compounded by the methods a surveillance app might exploit , what happens to minors locked out of necessary services, and which entity carries the compliance burden.
There is also an unresolved threshold gap. Current law applies to under-16s, while the Gmail warning references under-18s. Those are different populations, and merging the two thresholds obscures a significant policy distinction.
What the Stakes Look Like From Here
If the framework expands to cover email infrastructure, the conversation shifts from screen-time management to something with wider consequences.
If Australia’s social-media framework expands to cover email infrastructure, the question is no longer about managing algorithmic exposure or screen time. It becomes a question about whether young people can participate in educational, civic, and economic life without an adult intermediary account , a concern that parallels how government health, financial, and legal data restrictions are reshaping platform obligations in Europe. That outcome has not been proposed, and it may never arrive. The distance between restricting a social-media account for under-16s and restricting email for under-18s closes quickly, however, if policymakers treat the existing law as a starting point rather than a boundary.
