- Read the Roblox undertaking here.
Australia’s eSafety Commissioner has secured a court-enforceable undertaking from Roblox over child safety concerns on its platform. Roblox has agreed to strengthen protections against adult contact with children and improve children’s privacy settings. It will also make changes to its reporting systems for harmful material. The undertaking follows an eSafety investigation into Roblox’s compliance to Australia’s Online Safety Industry Standard. Roblox signed the undertaking on August 17, 2026. eSafety Commissioner Julie Inman Grant accepted it on August 19, 2026. The undertaking took effect on acceptance and will remain in force for three years.
Issues flagged by the regulator: eSafety’s investigation tested Roblox’s safety measures using accounts presented as adults and young Australian children. It identified concerns around contact between users, children’s privacy and reporting harmful material.
- Adult-to-child contact: Adults could send connection requests to minors without parental or carer consent. eSafety said this could facilitate contact that may enable grooming, sexual exploitation or other unlawful conduct.
- Children’s interactions and visibility: Children and adults could view and respond to each other’s posts on forums outside games. Meanwhile, children’s connections were visible to other users. Their profiles could also display account names, connections, avatar images and non-sensitive biographical information.
- Reporting accessibility: eSafety found problems with Roblox’s dedicated Australian reporting form on mobile devices. The form could not be accessed through the in-app reporting button on Android. On iPhone, the link appeared truncated and did not appear clickable. The form also required users to provide a URL for harmful material, which eSafety said could discourage reports about material or behaviour within Roblox’s different experiences.
- Reporting outcomes: Roblox’s existing in-app reporting system did not notify complainants about the outcome of investigations into their reports.
What Roblox has committed to: The company has agreed to implement new settings and tools to address these concerns. The undertaking sets deadlines from the commencement date through to three months afterwards.
- Restrict adult connection requests: Within three months of the commencement date, Roblox must prevent adults from sending connection requests to accounts held by minors without parental or carer consent.
- Restrict community forums: From the commencement date, users who have not completed an age check cannot post on community forums. Age-checked young Australian children also cannot post without parental or carer consent.
- Protect children’s connections and profiles: Within two months, Roblox must prevent children’s connections lists from being visibleto other usersby default. It must also ensure children’s biographies are not visible by default to users who are not their connections.
- Improve reporting and make it easier to submit complaints: Within three months, Roblox must tell Australian users about the outcome of reports concerning illegal or highly harmful content. This includes child sexual abuse material and violent extremist content. It must also make its dedicated Australian reporting form accessible through its in-app link, including on Android, and ensure the link is clearly presented on mobile devices. The form’s URL field must also become optional.
- Provide an interim reporting route: Until the changes to Roblox’s existing reporting system are implemented, the company must direct Australian users seeking to make reports towards its dedicated Australian online safety reporting form.
Independent audit requirements: Roblox must appoint an independent Compliance Auditor at its own expense. The auditor will assess compliance with both the new undertaking and Roblox’s previous commitments The first audit report is due three monthsafter the appointment. Further audits must take place annually for the rest of the undertaking’s three-year term.
- Compliance with commitments: The auditor will assess whether Roblox has complied with the undertaking and its previous commitments across relevant parts of the platform.
- Age-assurance systems: The auditor will examine how Roblox monitors and tests its age-assurance measures, including attempts by users to circumvent them.
- Age-check results: Reports must include the number of Australian users completing age checks through facial age estimation, ID verification or alternative mechanisms. They must also record cases where Roblox’s existing age information materially differs from an age-check result.
- Roblox’s response to discrepancies: The audit must record what actions Roblox takes after learning that information it holds about an Australian user’s age may materially differ from their actual age.
- Allahabad HC seeks centre’s reply on PIL to bar minors from Roblox
- Roblox To Roll Out Facial Age Checks For Age-Appropriate Chat Experience
