Australia’s eSafety regulator just handed Roblox a court-enforceable undertaking after its own tests proved the platform still lets adults reach kids under 16 without parental consent. Connection requests, forum posts outside games, and fully public profiles and friend lists all failed to trigger the promised safeguards, even after Roblox rolled out new account types earlier this year. The company claims it already meets the Online Safety Act obligations, yet the regulator found children’s data visible to anyone and no default privacy on minor accounts.