Age verification and child online safety are now a significant part of Indonesia’s digital regulatory framework. The Government Regulation No. 17 of 2025 on the Governance of Electronic Systems for Child Protection (PP TUNAS)[1] established a dedicated framework for protecting children from harmful online content, exploitation, cyberbullying, scams, digital addiction and risks to their personal data. The regulation came into force on 27 March 2025.
The framework is implemented by the Ministry of Communication and Digital Affairs (Kemkomdigi)[2], with Ministerial Regulation No. 9 of 2026 providing detailed requirements for age limits, child-user verification, risk assessment and child-protection measures. The regulation came into force on 28 March 2026.
Indonesia has adopted a risk-based approach. Platforms must assess the risks associated with their products, services and features and implement safeguards appropriate to the age and risk profile of their users.
Social Media
Minimum Age Requirements
Indonesia has introduced a minimum age of 16 for accounts on digital platforms classified as high risk. The restrictions began to be implemented from 28 March 2026 and initially covered major services including YouTube, TikTok, Facebook, Instagram, Threads, X, Bigo Live and Roblox.
The framework requires platforms to:
- Prevent children under 16 from holding accounts on high-risk digital platforms
- Provide clear information about minimum age requirements
- Apply safeguards appropriate to different age groups
- Implement mechanisms to verify child users and assess the risks associated with their services
The regulations recognise several age bands for children: 3–5, 6–9, 10–12, 13–15 and 16–17. Platforms must take account of the developmental needs of children within these age groups when designing and providing services.
Platform Enforcement and Compliance
The Indonesian Government has moved beyond voluntary commitments and has begun actively enforcing the new requirements. In March 2026, Kemkomdigi summoned Google and Meta over compliance with the under-16 restrictions.[3]
The Government has also reported positive compliance measures from major platforms. Meta subsequently aligned Facebook, Instagram and Threads with a minimum age of 16, while Roblox committed to complying with PP TUNAS following discussions with the Government.
Adult and Harmful Content Controls
The Indonesian framework links age assurance directly to the prevention of children's exposure to harmful and inappropriate content. The Government has identified pornography, cyberbullying, online fraud and digital addiction among the risks that the regulations are intended to address.
Platforms are expected to:
- Restrict children's access to products, services and features that are inappropriate for their age or risk profile
- Implement age and user-verification mechanisms
- Design services with child safety incorporated into products and features
- Provide mechanisms for reporting misuse or potential violations of children's rights
- Apply stronger safeguards where products or features present greater risks to children
The regulations therefore place responsibility on digital service providers to build child protection into the design and operation of their services, rather than relying solely on parental supervision.
Chatbots, AI and Interactive Applications
Indonesia's PP TUNAS framework applies broadly to electronic systems, products, services and features rather than being limited to traditional social media. The risk-based approach means that emerging digital services can fall within the child-protection framework where they are accessible to children and present relevant risks.
The framework requires providers to assess the characteristics and risks of individual products, services and features. This could be relevant to interactive applications, algorithmically delivered content and other digital services as their use by children develops.
At present, the regulatory framework is broader than a specific standalone age-verification regime for AI chatbots. Requirements should therefore be considered according to the particular service, features and risk profile rather than assuming that all AI services are subject to a single minimum age.
Online Gaming and Other Digital Services
Indonesia's child online safety framework extends beyond social media. Roblox was included among the platforms targeted during the initial implementation of PP TUNAS, demonstrating that the Government's approach also covers gaming and interactive services.
The framework requires providers of digital products and services to consider:
- The minimum age appropriate for their products, services and features
- The risk profile of the service
- Age verification and child-user verification
- Parental involvement where required
- Privacy and personal-data safeguards
- The design of features and services according to children's developmental needs
Indonesia also operates the Indonesia Game Rating System (IGRS)[4], which provides age classifications for games. The wider PP TUNAS framework adds child-protection obligations to the regulatory environment for online gaming and interactive services.
Enforcement Powers and Regulatory Oversight
PP TUNAS gives the Government significant oversight and enforcement powers in relation to electronic system providers. Kemkomdigi can monitor and investigate compliance and respond to reports or complaints concerning potential breaches.
Administrative sanctions can include:
- Written warnings
- Administrative fines
- Temporary suspension of services
- Access termination
The Government has already begun using its supervisory powers following implementation of the new rules, including investigations and compliance action involving major international platforms.
Technical Implementation and Age Verification
Age and user verification are explicit components of the Indonesian framework. Ministerial Regulation No. 9 of 2026 requires electronic system providers to implement mechanisms for verifying child users according to the risk level of the service.
The Government has also recognised that simple self-declaration of age can be insufficient. In February 2026, the Deputy Minister of Communication and Digital Affairs stated that children frequently manipulate their stated age to bypass platform restrictions and called for platforms to consider age-inference and behavioural detection technologies.[5]
Technical implementation is therefore expected to consider:
- The reliability of age verification mechanisms
- The ability of systems to identify users attempting to circumvent age restrictions
- The risk profile of the service
- Privacy and personal-data protection
- Proportionate verification measures appropriate to the service and user
The Government's July 2026 assessment of Apple's services further demonstrates the risk-based approach - individual products and features are being assessed according to their characteristics and potential risks to children.[6]
Child Data Protection and Algorithmic Safeguards
Child privacy and data protection form an important part of the PP TUNAS framework. Platforms must incorporate child protection into the design and operation of their services and consider the particular risks associated with processing children's personal data.
Child-focused safeguards include:
- Protection of children's personal data and privacy
- Consideration of data-protection risks when services are designed and operated
- Restrictions on practices that could exploit children's data
- Risk-based safeguards appropriate to the age and characteristics of child users
- Greater protection where products, services or features present higher risks
The framework is intended to ensure that child protection is not limited to preventing access to inappropriate services, but also addresses risks arising after children are using a digital product or service.
PLEASE NOTE This page summarises current Indonesian law and regulatory developments as of August 2026 and does not constitute legal advice. Always consult independent legal advisers before making compliance decisions.
[1] https://ps-engage.com/pp-tunas-indonesias-new-digital-regulation-to-protect-children-online/
[2] https://www.komdigi.go.id/berita/pengumuman/detail/ministry-of-communication-and-information-technology-kominfo-task-of-kominfo-building-a-three-sector-of-information-technology
[3] https://www.thejakartapost.com/business/2026/03/31/govt-summons-meta-google-over-noncompliance-with-child-social-media-curbs
[5] https://en.antaranews.com/news/403322/digital-platforms-urged-to-create-solutions-for-child-age-faking
[6] https://www.mlex.com/mlex/articles/2497009/indonesian-ministry-to-verify-if-apple-services-comply-with-child-protection-rules