On April 22, 2026, Senator Sherwin "Win" Gatchalian filed Senate Bill No. 2066, the Social Media Safety for Children Act, which would bar anyone under 16 from registering, accessing, or maintaining an account on any social media platform in the Philippines. Platforms would have to deploy age and identity verification, run regular audits to detect and deactivate underage accounts, block circumvention through duplicate or reactivated accounts, and add parental-supervision tools. The bill openly models itself on Australia's 2024 minimum-age law and on Indonesia's March 2026 restriction — the first in Southeast Asia.
The harm the bill is trying to reach
The concern is genuine and the numbers are not trivial. The 2024 National ICT Household Survey by the Philippine Statistics Authority and the Department of Information and Communications Technology found that 66% of children aged 10 to 16 use the internet, that those children average 3.93 hours online per day, and that roughly 92% maintain at least one social media account. A government watching near-universal adoption among pre-teens — alongside documented exposure to grooming, scams, and engagement-optimized feeds — is not acting irrationally when it asks platforms to shoulder part of the burden. The strongest version of Gatchalian's case is that voluntary self-regulation has plainly failed, and that shifting the duty onto the companies profiting from minors' attention is the proportionate move.
Australia is the experiment Manila is copying — and it is going badly
The trouble is that the Philippines is borrowing the design before the original has shown it works. Australia's Online Safety Amendment (Social Media Minimum Age) Act 2024 took effect on 10 December 2025, covering ten platforms — Facebook, Instagram, TikTok, Snapchat, YouTube, X, Reddit, Threads, Twitch, and Kick — with penalties of up to A$49.5 million per breach.
Within months the results were ambiguous at best. By April 2026, Biometric Update reported that roughly 70% of under-16 users still maintained access to Instagram, Snapchat, and TikTok. In late March 2026, Communications Minister Anika Wells and the eSafety Commissioner opened investigations into Facebook, Instagram, Snapchat, TikTok, and YouTube, accusing them of doing "the absolute bare minimum" — letting self-declared minors simply retry verification and failing to stop new under-age account creation. The public record of the law's first months notes plainly that "many children have already been able to get around the ban."
That is the predictable result of an age check that has to be both accurate and hard to fool. Australia's own Age Assurance Technology Trial — the most thorough public test to date — concluded that age assurance "can be done privately, efficiently and effectively." But the same trial drew criticism for excluding the most consequential real-world metric, how easily the systems are circumvented by VPNs and AI-generated faces, and a stakeholder-board member resigned over the methodology. A verification wall that a determined 15-year-old defeats with a borrowed ID or a VPN does not protect that child; it mostly inconveniences the compliant majority.
The privacy bill comes due
The deeper cost is what age verification does to everyone else. To prove a user is over 16, a platform must check the age of every user — adults included. In practice that means collecting identity documents or running biometric face scans across the entire population.
Australia at least recognized the danger and wrote a guardrail: under Section 63F of Part 4A of the Online Safety Act 2021, platforms and age-assurance vendors must "ringfence and destroy" any personal data collected for age checks, with the privacy regulator (OAIC) enforcing the rule. SB 2066, as filed, mandates "identity verification" but pairs it with no comparable data-minimization or destruction duty and names no regulator to enforce one. In a country still scaling up enforcement of its Data Privacy Act, that is a serious gap — and Australia's trial already found vendors over-retaining data and building tools to retrace users' actions, precisely the surveillance creep a destruction mandate is meant to stop.
This is why digital-rights groups treat these laws as a category, not one-offs. The EFF, writing in May 2026 about a parallel California ban, called age-gating "paternalistic and privacy-destroying" and "a dangerous new system of control," and questioned whether age gates are "the silver bullet to the internet's problems they're being promoted as." The free-speech dimension is not abstract: an identity wall in front of lawful speech raises the cost of anonymous and pseudonymous expression for everyone — including the journalists, activists, and abuse survivors who depend on it.
A proportionate version exists
None of this means the Senate should do nothing; it means the burden and the design should match the harm. A proportionate bill would target the demonstrated harms — algorithmic amplification to minors, predatory contact, addictive engagement loops — rather than a blanket account ban a VPN defeats. It would write a hard data-destruction and minimization rule on the Australian model, with the National Privacy Commission named as enforcer. It would prefer privacy-preserving, on-device age estimation over centralized identity collection. And it would build in a sunset clause and a published evaluation, so the Philippines learns from Australia's metrics instead of repeating its mistakes.
Gatchalian is right that the status quo asks too little of platforms. But a law that makes every Filipino hand over an ID to log in — while the teenagers it targets simply route around it — would trade a real privacy cost for a symbolic safety gain. Manila has the rare advantage of watching the experiment run elsewhere first. The lesson from Sydney is not "ban harder." It is "verify less, protect more."