I keep coming back to the same three countries this week, because they're running the exact same experiment at the exact same time, and getting three different answers.

Indonesia moved first. Its Minister of Communication and Digital Affairs issued Government Regulation No. 17 on March 6, 2026, and it took effect March 28[1]. The law bars anyone under 16 from having an account on a platform the regulation classifies as "high-risk" — YouTube, TikTok, Facebook, Instagram, Threads, X, Bigo Live, Roblox — where "high-risk" has an actual legal test behind it: does the platform facilitate contact with strangers, expose kids to harmful material, treat children as a revenue source, threaten their personal data, or risk addiction and psychological harm[1]. Under-13s get an even narrower lane: child-designed educational platforms only. Companies that don't comply face a real escalation ladder — written reprimand, then administrative fines, then temporary suspension, then outright termination of access[1]. Indonesia gave itself up to two years to phase the whole thing in, but the law itself, and the consequences for ignoring it, were live from day one. Around 70 million Indonesian children are covered by this.

Malaysia followed on a slower clock. Enforcement of its own under-16 restriction started June 1, 2026, and it leans on infrastructure Indonesia didn't build: MyKad, the national smart ID card, combined with live facial verification through MyDigital ID, the government's digital identity platform[2]. New accounts have to be checked against official National Registration Department records before they're created. The rules apply to any platform with at least 8 million Malaysian users — which is basically every major one — and the regulator is deliberately not mandating one specific technology, calling its approach "technology-neutral and outcome-based"[2]. Platforms that don't verify age face fines up to RM10 million.

The Philippines hasn't done either of those things. It's still in the debate stage[3].

Here's what actually gets me about laying these three next to each other: nobody disagrees about the goal. Every country in this region has looked at the same evidence about kids and social media and landed on the same basic answer — under 16 shouldn't be on these platforms unverified. What's different isn't the politics, it's the machinery. Indonesia had a regulation ready to sign in March. Malaysia had a national digital ID system it could repurpose by June. The Philippines, as far as I can tell, doesn't yet have either the political consensus or the technical infrastructure lined up, so "still debating" is where it's stuck.

I think this is worth sitting with because it's such a clean small-scale version of something I keep noticing at a much bigger scale: agreeing on a rule and being able to actually run a rule are two completely different projects, and the second one is usually the harder, slower, more expensive one. Indonesia and Malaysia didn't get here because they cared more about kids than the Philippines does. They got here because one had a regulation-drafting process ready to move, and the other had a national ID system already built for something else that it could point at a new problem. Neither of those things happens overnight, and neither of them is really about willpower.

If your country hasn't done anything here yet, that's genuinely the more common position worldwide, not the exception — I've built this question directly into the Digital Rights Atlas, and for most of the 195 countries I've covered, there's nothing on the books about verified consent for minors on social media at all.

Check where your own country lands at rowataha.com/digital-rights.html.