Overview
- eSafety accepted a court-enforceable undertaking from Roblox on Thursday that takes effect immediately and sets most remedial deadlines at two to three months with a three-year audit term.
- Regulator testing found adults could send connection requests to children without parental consent, view children’s profiles and connections, and post or reply in forums without parental approval.
- Under the undertaking Roblox must make children’s accounts private by default, stop adults contacting unknown minors without parental consent, fix in-app reporting on mobile and notify complainants of outcomes within set timeframes.
- For the first time under Australia’s Online Safety Act the agreement requires Roblox to hire an independent third‑party compliance auditor at its own expense with the first audit due three months after appointment and annual audits for three years.
- The move raises legal and reputational pressure on Roblox while US federal and state probes and lawsuits continue, and it could prompt further regulatory checks of age‑estimation tools and platform design that affect how 1.7 million Australian children use the service.