Indonesia has deactivated roughly five million accounts created by children on digital platforms following the rollout of new government regulations designed to protect minors in the online sphere. Communications and Digital Affairs Minister Meutya Hafid announced the milestone, emphasizing that the achievement represented cooperation between authorities and technology companies operating within the country's borders. The figure underscores Jakarta's commitment to addressing child safety concerns that have intensified as internet penetration deepens across Southeast Asia's largest economy.
The regulatory framework, formally known as PP Tunas, differs markedly from approaches adopted elsewhere in the region and globally. Rather than imposing blanket age restrictions akin to Australia's ban on users under 16 accessing designated high-risk platforms, Indonesia has embraced what officials describe as a risk-based methodology. This approach seeks to tailor protections according to individual platform characteristics and associated dangers, allowing children continued access to lower-risk services while implementing enhanced safeguards on more problematic applications.
When contextualised against global benchmarks, Indonesia's five million deactivations represent a substantial intervention. Hafid noted that the figure exceeds what TikTok accomplished through similar initiatives in Australia, suggesting that Indonesia's regulatory weight and market size have produced measurable results. However, officials acknowledge that removing five million accounts remains proportionally modest relative to the nation's estimated 170 million internet users, many of whom are minors seeking digital engagement for education, entertainment and social connection.
The philosophical distinction between Indonesia's regulatory approach and Australia's age-ban model reflects deeper tensions in global child protection strategy. While Australia argues that categorical restrictions eliminate risk entirely, Indonesia's framework assumes that blanket prohibitions are neither practically enforceable nor necessarily beneficial. Instead, the government encourages technology companies to redesign services specifically for the Indonesian market, implementing features that permit child participation while substantially mitigating exposure to harmful content, predatory behaviour and excessive usage patterns.
Platform cooperation has materialised in tangible ways. Roblox, the gaming service, has disabled its default chat functionality for Indonesian users under 16, requiring parental authorisation before children can engage in direct communications with other players. This modification exemplifies the regulatory intent: rather than excluding young users entirely, platforms implement layered protections that preserve access while reducing vulnerability. Such adaptations signal that technology companies increasingly recognise Indonesia as a significant market where tailored compliance strategies prove both commercially sensible and socially responsible.
The regulatory framework requires Electronic System Providers to conduct self-assessments documenting the risks their services present to children. This transparency mechanism forms the foundation of Indonesia's risk-categorisation system. The Communications Ministry has reviewed submissions from 79 providers operating 200 platforms, with eight self-identifying as high-risk services. This classification process enables authorities to concentrate enforcement and remedial efforts on the most problematic applications while permitting lower-risk platforms greater operational flexibility.
Implementation challenges, however, remain substantial. Age verification represents the most significant technical barrier, as accurately determining user age without intrusive data collection or advanced biometric systems proves difficult at scale. Most technology companies currently lack sophisticated age-estimation algorithms, facial verification capabilities or behavioural analysis tools necessary to reliably identify underage users. The five million account deactivations largely reflect self-reporting by platforms when users voluntarily provide birthdates or admit to being underage, rather than deployment of cutting-edge verification technologies.
This technical gap exposes vulnerabilities in Indonesia's regulatory architecture. Determined minors can circumvent age restrictions through falsified information, while legitimate children may face friction during account creation. The ministry's reliance on company self-assessments, whilst pragmatic given Indonesia's administrative capacity constraints, means that risk classifications depend significantly on provider honesty rather than independent verification. Some technology companies may underestimate associated dangers, while others might over-classify services to avoid regulatory scrutiny.
Looking forward, Hafid has signalled that Indonesia seeks to move beyond account removal toward structural platform transformation. The vision encompasses not merely excluding underage users but rather encouraging comprehensive service redesigns that embed child safety into core features. This philosophy aligns with emerging international consensus that technology companies bear responsibility for creating genuinely child-friendly environments rather than simply restricting access. Such an approach requires sustained dialogue between government, platforms and civil society rather than adversarial regulation.
For Malaysia and other Southeast Asian nations grappling with similar child protection challenges, Indonesia's experience offers instructive lessons. The risk-based approach provides a flexible template that avoids Australia's binary restrictions whilst maintaining meaningful safeguards. However, Indonesia's struggles with age verification and reliance on self-assessment highlight the technical and institutional capacity needed to enforce digital regulations effectively. As regional governments increasingly scrutinise platform accountability, Indonesia's evolving framework demonstrates both the promise and limitations of regulating services created by companies whose compliance mechanisms remain fundamentally opaque and geographically dispersed.
