Joao Viegas/Unsplash
New Zealand’s government introduced legislation on Monday to bar children under 16 from major social media platforms — but the bill arrived in Parliament already missing the votes of two of the three parties that make up the ruling coalition, creating an unusual political situation in which the opposition Labour Party, not the government itself, became the deciding factor in whether the measure could advance at all. By Tuesday, Labour had confirmed its support, and the government said it still had no room in the parliamentary schedule to bring the bill to a first reading vote before the November 7 election.
The Online Safety (Minimum Age and Child Safety Risk Assessment) Bill was presented to Parliament by Prime Minister Christopher Luxon and Education Minister Erica Stanford. Under the bill’s provisions, platforms classified as high-risk — specifically naming Instagram, TikTok, Snapchat, Facebook, and YouTube — would be required to verify that users are at least 16, using a tiered set of methods: existing account data, facial age estimation technology, digital identity services, and formal government-issued identification. Self-declaration of age alone would not be sufficient, a notable departure from Australia’s “reasonable steps” standard that allowed platforms to interpret their compliance obligations broadly. Platforms that fail to comply would face fines of up to 10% of their global annual revenue — a ceiling that, applied to Meta (which recorded more than $200 billion in global revenue in 2025), would represent a liability of more than $20 billion.
The bill was introduced at a moment of acute political complexity. The ACT Party and NZ First — two of the three parties in Luxon’s ruling coalition — each invoked “agree to disagree” clauses in their coalition agreements and announced they would vote against the legislation. That leaves National, Luxon’s own party, as the sole government party supporting a bill the government itself introduced. “We’ve got 11 days to go. We’ve got a big legislative agenda. The reality is, we’re not going to get through to first reading,” Luxon told reporters on Monday. Labour confirmed its support on Tuesday.
Why National Needs Labour to Pass Its Own Legislation
The political situation New Zealand’s bill created is without clear precedent in the global wave of child social media legislation that began with Australia’s December 2025 ban. In Australia, the UK, France, the EU, and the United States, the central legislative battle has been between governments and platforms. In New Zealand, the central battle is within the government itself.
ACT leader David Seymour did not dispute the underlying problem. “Protecting children online is a serious problem,” he said. But he argued the proposed solution was “a terrible solution” that “won’t work, and the side effects will leave us worse off,” citing privacy burdens imposed on all adult New Zealanders and the likelihood that restricted teenagers would simply move to less regulated platforms.
NZ First leader Winston Peters took a more categorical position: “no method would fulfil that intent without banning VPNs or the use of digital ID to enforce the law,” he said in a statement. Peters also questioned whether the legislation could be legitimately described as a “Government” bill when two of three coalition parties oppose it. NZ First’s own statement put the point plainly: “The Government is not moving to ban under-16s from social media. The National Party is.”
Labour leader Chris Hipkins confirmed his party’s support on Tuesday morning, saying “We will support that bill” and writing to Education Minister Stanford conveying Labour’s backing. “The bill undoubtedly can use improvement. I am not going to let a quest for perfection, though, delay progress,” he said, calling the select committee process the vehicle for “significant improvements.” Labour technology spokesperson Reuben Davidson had separately written to Stanford requesting clarity on how a platform could demonstrate compliance, whether a full privacy impact assessment would be published, and how penalties would actually be enforced.
The practical consequence of the political arithmetic: even with Labour’s confirmed support, Stanford told reporters Tuesday that there are only three sitting weeks remaining before Parliament rises for the election, and the bill will not receive its first reading before then. Whatever the bill’s final form, it will be left to the next parliament — and whatever government emerges from November — to act on it.
What the Bill Would Actually Do to Adult Users
The bill’s headline purpose is to protect children under 16. Its operative mechanism does something broader: it requires every user of covered platforms to have their age verified. Because platforms cannot determine which of their users are under 16 without checking all of them, the bill’s tiered verification requirement applies to adults as much as to children. That is not a side effect — it is the mechanism.
Civil liberties organization PILLAR named the issue precisely. “How much privacy should millions of law-abiding adult New Zealanders be required to surrender in order to enforce a restriction on children?” executive director Nathan Seiuli asked in a statement released the day the bill was introduced. PILLAR has separately argued that the bill is “the beginning of a much broader push for greater state control over how New Zealanders access, communicate and participate online” and has proposed a Digital Bill of Rights that would require any limitation on digital access to be demonstrated as lawful, necessary, and proportionate.
The Greens also voiced skepticism. Media and communications spokesperson Hūhana Lyndon called the bill “unworkable” and argued it left “big tech off the hook for the widespread harm their platforms cause” — a critique focused less on the privacy burden and more on the bill’s potential to become a compliance exercise rather than a genuine reduction in harm.
New Zealand’s Privacy Commissioner and the New Zealand Council for Civil Liberties have raised concerns about the bill’s compatibility with New Zealand’s bill of rights and the Privacy Act 2020.
How Does Age Verification Actually Work — and Why Has It Already Failed?
To verify that a user is over 16, a platform must collect information establishing who that user is. The four methods specified in the NZ bill each carry a different privacy cost.
Existing account data is the least intrusive but the least reliable — it captures only users who have already provided a birthdate, which any determined minor can falsify. Facial age estimation uses machine learning to infer a user’s age from a live photograph or selfie; Australia’s own government found “natural error margins” around the 16-year threshold, and the technology has been shown to be vulnerable to deepfakes and high-quality photographs. Digital identity services and formal government ID are the most accurate but require users to hand identity documents to private third-party companies — a data concentration that introduces a documented breach risk. Age verification companies have repeatedly demonstrated the vulnerability of these systems.
That breach risk is not theoretical. AU10TIX — an identity verification vendor that has served TikTok, X, and Uber — left administrative credentials exposed for more than 18 months, with users’ names, dates of birth, and facial images of identity documents accessible through a public Telegram channel in 2024. In October 2025, a breach involving Discord’s third-party support provider exposed roughly 70,000 government ID photos. In February 2026, security researchers found that Persona — a verification provider used for age checks — had a government dashboard publicly accessible on a federal server; its verification pipeline ran 269 separate checks, including terrorism and espionage watchlist screenings, and could retain biometric data for up to three years.
Privacy-preserving alternatives exist. Zero-knowledge proofs allow a user to mathematically demonstrate they are above an age threshold without transmitting any identity to either the platform or the verification company. Apple’s Declared Age Range API can confirm an age bracket without revealing the underlying identity. New Zealand’s bill does not require platforms to use these approaches; it requires only that platforms use the tiered methods described — leaving document-scan verification and facial biometric collection as the path of least resistance for compliance.
What Australia’s Experience Tells New Zealand
New Zealand’s bill is explicitly modeled on Australia’s Online Safety Amendment, which took effect in December 2025. Prime Minister Luxon cited Australia’s experience as validation. But the evidence from eight months of enforcement suggests that validation should come with significant caveats.
Australia’s eSafety Commissioner published a first formal longitudinal evaluation on July 31, 2026, finding that 81.5% of Australian children under 16 were still using at least one age-restricted platform three months after the ban took effect — down from 85.9% before the ban, a reduction of 4.4 percentage points. More than half of children surveyed said the platform they were still using had not checked their age at all. An additional 18.2% said platforms classified them as over 16 despite their actual age.
A peer-reviewed study published in the British Medical Journal in late June 2026 by researchers at the University of Newcastle found that 85% of Australian teens under 16 continued using the targeted social media apps. The most common age check encountered was self-declaration — a method the NZ bill explicitly excludes. Daily social media use was unchanged among 12–13 year olds; it dropped from 78% to 69% among 14–15 year olds, and increased by 9% among those over 16. The study concluded there was “little evidence of immediate substantive reductions” in reported social media use.
At a Senate hearing on August 14, 2026, Meta, TikTok, Google, and Snapchat all admitted under direct questioning that they cannot say how many children remain on their platforms after nine months of Australia’s ban — because their compliance systems count accounts removed, not children who still have access. The eSafety Commissioner said publicly that she was unlikely to succeed in civil-penalty proceedings against the platforms under investigation without additional document-production powers that parliament is currently considering.
Children who lost access to covered platforms in Australia did not go offline. They moved. Pinterest usage among under-16s grew from 16.6% to 21.8% in the three months following the ban; BeReal went from essentially zero to 2.2%; messaging service use jumped from 40.5% to 52.3%. Whether the platforms children moved to were safer, better moderated, or less harmful than those they left is a question the two-year longitudinal study will need to answer.
Luxon cited the displacement risk as an argument for international coordination rather than evidence against the legislation. “If I’m a CEO of one of those big tech firms and I have 42 countries that have a similar framework and a similar approach, I’m paying attention to that,” he told Bloomberg on Monday.
Seymour countered that Australia’s ban had “made little difference, with nearly all children still on social media as if there is no ban.” Peters described Australia’s experience as a “colossal failure.”
Luxon’s Case: “A Generation of Children”
The Prime Minister’s rationale for the legislation was direct. One in three New Zealand children aged 13 to 17 are spending at least five hours on social media per day, Luxon said in his announcement. “Social media is exposing them to harmful content, addictive technology and pressures they are not equipped to deal with, and it’s affecting their family life, mental health, sleep, and education.” Stanford said the bill creates “an enduring framework that can evolve alongside technology,” while acknowledging that no system would be perfectly effective. The government’s fact sheet explicitly notes that some children will attempt to circumvent the rules — but argued this was not grounds for inaction.
The bill’s scope is deliberately structured around exclusions as much as inclusions. Messaging apps, email, voice and video calling, AI productivity chatbots, Spotify, Roblox, and LinkedIn are all excluded from the ban’s coverage. YouTube, by contrast, would be restricted under the NZ framework — a point of difference from Australia, which originally exempted YouTube from its coverage for educational use.
The bill would also require platforms used by children to conduct regular risk assessments and report annually on how identified risks are being reduced. A new online safety regulator, to be established within the Department of Internal Affairs, would independently monitor compliance and enforce the law — with the regulator ideally operational by the end of 2027.
For platforms, the compliance burden extends beyond the 16-year age restriction: the bill requires risk assessments for all New Zealand users under 18, creating a population-wide monitoring obligation that goes beyond just the age cutoff itself.
Luxon’s government has otherwise taken what analysts describe as a “light-touch” approach to technology regulation. Its July 2025 national AI strategy, developed under then-Technology Minister Shane Reti, was explicitly framed as reducing barriers to AI adoption rather than introducing strict regulation. The social media bill represents a significant departure from that posture — and one that Luxon has been unable to carry his coalition partners on.
Can Any Government Pass This Before the Election?
The bill’s parliamentary path is obstructed not just by coalition politics but by calendar arithmetic. New Zealand goes to the polls on November 7, 2026. Even with Labour’s confirmed Tuesday support, Stanford told reporters the government has only three sitting weeks remaining before Parliament rises and the bill will not receive its first reading. Whatever form the legislation takes, it will carry over to the next parliament.
What happens after November 7 depends entirely on who governs New Zealand’s next parliament. Recent NZ election polls show the National coalition holding a razor-thin majority. If Labour leads the next government — with or without coalition partners — it would control the bill’s fate, given that Hipkins has already said Labour wants “a greatly improved version” of the legislation implemented by whoever forms the next government. If National wins a second term, it would face the same problem it faces now: needing either ACT or NZ First to change position, or maintaining Labour’s support from the opposition benches.
The political paradox the bill has created will outlast this parliament. Whichever party wins in November inherits not just the policy question but the institutional question: what does it mean for a government to introduce legislation that it cannot pass without the party it defeated at the last election?
Is This Age Verification Requirement Safe for Adult Users?
Age verification for social media access is not primarily a question about children. It is a question about every adult who uses these platforms — and what they are required to surrender to prove they are adults.
New Zealand’s bill specifically prohibits pure self-declaration of age, meaning platforms cannot rely on a user typing in a date of birth. They must use at least one additional verification layer. In practice, the most commonly deployed additional layer is either facial age estimation — which introduces biometric data collection — or formal ID upload, which routes government identity documents through private verification companies. Both concentrate sensitive identity data in systems that have already suffered documented breaches.
PILLAR has characterized this as building “a digital checkpoint at the entrance to the internet.” The New Zealand Council for Civil Liberties has flagged the bill’s potential conflict with the New Zealand Bill of Rights Act 1990 — in particular, its right to freedom of expression — and with the Privacy Act 2020. Neither question has been resolved by Attorney-General review as of the bill’s introduction.
For anyone considering how this law would work in practice: every adult who creates a new social media account on a covered platform after the law takes effect would be required to demonstrate to that platform’s satisfaction — using data collected and processed by a third-party vendor — that they are 16 or over. Whether that process is privacy-preserving or privacy-invasive depends on which verification method the platform chooses. Nothing in the bill requires platforms to choose the more privacy-preserving option.
Currency conversions in this article are based on exchange rates as of August 25, 2026, and are approximate.
Frequently Asked QuestionsWill New Zealand’s social media ban pass before the November election?
Almost certainly not. Even after Labour confirmed support on August 25, Education Minister Erica Stanford told reporters there are only three sitting weeks remaining before Parliament rises ahead of the November 7, 2026 election, and the bill will not receive its first reading in that time. The bill’s fate will depend on the composition of the next parliament. Labour has confirmed it wants the bill to receive a first reading before the election, but the government says there is no room in the parliamentary schedule.
Why are ACT and NZ First — Luxon’s own coalition partners — voting against the bill?
ACT’s objection is philosophical: David Seymour argues the ban won’t work (children will find workarounds) and that the privacy burden on adult New Zealanders — who must all submit to age verification to prove they are not children — is disproportionate to the protection actually achieved. NZ First’s objection is technical and practical: Winston Peters said in his statement there is “no method that would fulfil that intent without banning VPNs or the use of digital ID to enforce the law,” and described Australia’s enforcement experience as a “colossal failure.” Both parties invoked “agree to disagree” clauses in their coalition agreements, which allow coalition partners to diverge from a shared position without triggering a confidence issue.
What does NZ’s age verification requirement mean for adult users of Instagram, TikTok, and Facebook?
If the bill passes in its current form, every adult New Zealander who creates a new account on a covered platform would be required to verify their age through a process that goes beyond simply typing in a date of birth. Platforms may use facial age estimation (which involves capturing a biometric image) or require a formal government ID to be uploaded to a third-party verification company. These companies have a documented track record of data breaches: AU10TIX left user identity data including facial images exposed for over 18 months in 2024; Discord’s third-party support provider exposed 70,000 users’ government ID photos in 2025; Persona’s verification pipeline was found publicly accessible on a federal server in 2026. The bill does not require platforms to use privacy-preserving zero-knowledge proof alternatives that could verify age without transmitting identity data. Whether your data is handled safely depends on which vendor your platform uses — and the bill provides no guarantee of that.
Has Australia’s social media ban actually worked, given that New Zealand is modeling its bill on it?
The evidence from Australia’s first eight months is mixed at best. The eSafety Commissioner’s July 2026 longitudinal evaluation found 81.5% of under-16s were still using at least one restricted platform three months after the ban took effect — down only 4.4 percentage points from before the ban. A peer-reviewed BMJ study by University of Newcastle researchers reached a similar conclusion, finding “little evidence of immediate substantive reductions in reported social media use.” Children whose accounts were removed often simply created new accounts, used platforms without logging in, or moved to services not covered by the ban. Australia’s regulator has said it is unlikely to win civil-penalty proceedings against platforms under the current law without expanded document-production powers — a structural enforcement gap NZ shares.