Roblox has entered a legally enforceable agreement with Australia’s online safety regulator requiring the gaming platform to strengthen protections for children against grooming, sexual exploitation, and other serious online risks.
The agreement follows roughly two years of engagement between Roblox and the eSafety Commissioner over the platform’s obligations under Australia’s Online Safety Act. Although Roblox had previously introduced a series of safeguards, testing conducted by eSafety in 2026 found that important gaps remained.
During its testing, the regulator found that adult accounts could send connection requests to young Australian children without obtaining parental or carer consent. Adults and children could also interact through posts on forums outside individual game environments.
Privacy settings presented another concern. Children’s connections could be viewed by other Roblox users, while profile information including account names, avatars, interests, and the names and number of connections could remain publicly visible without an option to restrict access.
Under the new undertaking, Roblox has committed to additional changes. Accounts belonging to young Australian children must receive stronger privacy protections and be private by default, while unknown adults will be prevented from contacting children without parental consent. The company must also provide accessible reporting tools and inform users about the outcome of complaints.
An independent third-party auditor will assess whether Roblox’s safeguards work as intended, including measures used to estimate users’ ages. According to eSafety, this is the first time third-party auditing has been required through an undertaking under Australia’s Online Safety Act.
Roblox has three months to implement the required measures. Because the undertaking is enforceable, failure to meet its commitments could result in eSafety seeking an order from Australia’s Federal Court directing the company to comply.
The agreement follows earlier commitments made by Roblox in 2025. Those measures included restrictions on communication between adults and users under 16, private-by-default accounts for younger users, parental chat controls, and age-estimation requirements for certain communication features. Roblox told the regulator at the end of 2025 that those commitments had been delivered, but subsequent testing prompted further regulatory action.
Roblox maintains that it is meeting its obligations under Australian law. A company spokesperson also said that the platform had delivered the commitments previously made to eSafety and would continue working toward improving children’s safety.
The Australian regulator has been increasing scrutiny of online gaming services more broadly. In April, eSafety issued legally enforceable transparency notices to Roblox and several other gaming platforms, seeking information about their efforts to address risks including child sexual exploitation, grooming, violent material, cyberbullying, and online hate.