Roblox has agreed to a court-enforceable undertaking with Australia's eSafety Commissioner to introduce further child safety measures, after the regulator's own testing found the platform was still allowing adults to contact children without parental consent. The finding is notable because it comes despite two years of engagement between eSafety and Roblox and a series of safety updates the company had already rolled out, suggesting those measures fell short in practice. Roblox maintains it believes it is already meeting its obligations under Australia's Online Safety Act, but has nonetheless committed to the changes to avoid the regulator seeking court enforcement.

eSafety's tests found that adults could still send connection requests to Australian children without consent, that children and adults could view and respond to each other's posts on community forums, and that anyone could view an underage user's profile details, connections and avatar with no way to restrict visibility. Under the new undertaking, Roblox must within three months prevent unsolicited adult-child contact, make children's accounts private by default, improve reporting tools and submit to a third-party audit of its safety measures. The move follows Roblox's earlier rollout of mandatory age verification and a three-tier account system (Kids, Select and regular), as well as a $12 million (Nevada) settlement in May over similar child safety failings in the United States.