Roblox has committed to a court-enforceable undertaking to strengthen child protection measures after Australia's e Safety commission found ongoing safety lapses on its platform.

Tests conducted by e Safety revealed that adult users could still send connection requests to Australian children without parental consent, and that both children and adults could view and respond to each other's posts on community forums. The regulator also found that underage users' connections, profiles, biographies, account names, avatar images, and other information remained publicly visible with no option to restrict visibility.

Roblox rolled out mandatory age verification in late 2025, starting with Australia, followed by requirements in the US and a global three-tier account system by mid-May. Despite these efforts, the company agreed to additional changes including preventing adults from contacting children without parental consent, making children's accounts private by default, and implementing accessible reporting mechanisms.

The company has three months to implement these measures or face court-ordered compliance. Roblox is also dealing with child safety lawsuits in multiple US states and previously agreed to a $12 million settlement with Nevada requiring ID verification and facial age estimation for users.