The Victorian government wants VCAT to be able to compel platforms to reveal the identities of anonymous accounts accused of online vilification, according to an AAP report.
The package also proposes removing the statutory requirement that families prove a child has suffered a permanent impairment of at least 10% before bringing negligence claims for psychiatric harm on behalf of minors, a change the government frames as protecting children and holding social‑media and AI platforms to account. Premier Jacinta Allan told reporters, “Social media and AI companies design their platforms to be addictive, and our kids are paying the price, ” and added, “If a platform hurts a child, families should be able to take that company to court” (AAP).
What the proposals do, in plain language
- VCAT demasking power: VCAT would gain authority to issue orders compelling platforms to disclose the identity of anonymous account holders accused of online vilification. “Demasking” here means a tribunal order requiring a platform to hand over account‑holder identifying information to a complainant or the tribunal.
- Lowering the child‑harm gate: For claims brought on behalf of minors, the government would remove the current statutory 10% permanent‑impairment threshold that now operates as a barrier to suing for negligence causing psychiatric harm (reported by AAP). Medical practitioners presently calculate permanent impairment under the existing framework; the draft reforms will set a new standard during consultation.
The government says both measures will be developed after consultations with VCAT, the courts and other stakeholders (AAP). Legal academics and advocates have welcomed the start of reform while warning the changes may be too narrow without further detail. As Marilyn Bromberg, Associate Professor of Law at the University of Western Australia, told AAP: “It’s a brave start, but I don’t think it goes far enough.”
Why this matters beyond the headlines
Two practical shifts make these proposals consequential for platforms, lawyers and executives:
- Demasking changes the procedural balance between anonymity and accountability. Identity‑disclosure orders in civil contexts exist in some overseas jurisdictions and, according to legal commentators cited by AAP, have sometimes discouraged harmful behaviour. Whether a state tribunal can turn an order into actionable compliance by multinational platforms will depend on enforcement mechanics.
- Removing the 10% permanent‑impairment gate for minors lowers a statutory barrier to litigation. Internationally, juries and courts are increasingly receptive to theories that platform design can produce real‑world harm: a US jury verdict reported by The New York Times on 25 March 2026 in K.G.M. awarded Meta $4.2 million (combined compensatory and punitive damages) and YouTube $1.8 million, illustrating the growing willingness to test platform liability theories in court.
Three determinants that will decide whether these reforms bite or blow off
-
Enforcement mechanics:
Can VCAT make an order stick against platforms headquartered overseas? Plausible mechanisms include voluntary compliance by local business entities, contractual hooks in local terms of service, or litigation that forces a cross-border legal test. The government will need to specify service, compliance timelines and penalties. Without that, demasking risks being symbolic.
-
Evidentiary threshold for disclosure:
Will VCAT require a prima facie case of vilification before ordering disclosure? Procedural protections, notice to the accused account, opportunity to contest, strict evidentiary standards and quick appeal routes, will determine whether demasking protects complainants without chilling legitimate anonymous speech.
-
Replacement standard for minors’ psychiatric harm:
Scrapping the 10% permanent‑impairment gate creates a vacuum: what test replaces it? Courts will still require causation and medical evidence, but whether the new standard accepts significant psychiatric injury short of a quantified permanent impairment is the central legal question for future claims.
Practical headaches for platforms and businesses
Expect legal challenges and operational shifts. Platforms will weigh whether to comply, litigate jurisdiction, or adjust product and moderation policies to reduce legal exposure. Practical impacts for businesses operating in or serving Victorian users include:
- shorter legal response windows and new disclosure workflows to handle VCAT orders
- possible tightening of identity and age‑verification processes for local accounts
- heightened documentation of design and safety decisions (audit trails for recommender algorithms, moderation records, and safety testing)
- an increased litigation vector where families can identify anonymous defendants more easily and pursue negligence claims on behalf of children
What to watch in the drafting and consultation
- exact wording of VCAT’s power and the evidentiary test for issuing an identity order
- procedural safeguards for the accused account‑holder to prevent wrongful unmasking
- how the law defines “platforms” and “AI platforms” (recommender engines, ad systems, chatbots and generative tools raise different causation and evidence issues)
- cross‑border enforcement language, will orders be targeted at local business entities or drafted for international service
- whether the government intends to extend demasking beyond vilification to defamation, cyberbullying and other online harms (Marilyn Bromberg told AAP there is “no reason the reforms should not be extended to other forms of online behaviours, including defamation and cyberbullying”).
Prioritised actions for executives (near‑term and medium‑term)
-
Near term (0-3 months):
- audit data‑retention, account‑identification and disclosure processes so you can respond rapidly to tribunal orders
- map which parts of your product surface Victorian users and whether local terms of service or business entities create compliance hooks
- brief legal, safety and communications teams and prepare parent/family communication templates
-
Medium term (3-12 months):
- revisit age‑verification and anonymous‑account policies where legally permissible and operationally feasible
- document product‑design tradeoffs (engagement features, recommender tuning, safety mitigations) and build an audit trail to support defenses against negligence claims
- run tabletop exercises for receiving and contesting disclosure orders and for responding to a psychiatric‑harm claim alleging platform negligence
-
Ongoing:
- monitor the drafting process closely, final details will determine exposure
- engage with regulators and industry groups to shape procedural safeguards and practical compliance rules
- budget for potential litigation and expanded safety operations if the law widens access for claimants
Key questions and honest answers
-
What does “demasking” actually allow VCAT to do?
As reported by AAP, it would permit VCAT to order platforms to disclose the identity of anonymous accounts accused of online vilification. The precise legal wording, procedural safeguards and enforcement mechanisms will be determined during consultation with VCAT, the courts and stakeholders.
-
Does removing the 10% threshold mean families can sue for any upset a child experiences?
The change removes the current statutory 10% permanent‑impairment gate for minors’ claims (reported by AAP), but it does not eliminate the need to prove causation or medical harm. The government has not yet specified the replacement standard; psychiatric assessments and legal causation will remain critical.
-
Will international platforms comply with VCAT orders?
Compliance depends on enforcement design. Orders may be enforced through local business entities, contractual obligations, or by platforms choosing to comply rather than litigate. If the drafting does not address cross‑border enforcement, demasking could be hard to operationalise.
-
Could this trigger a wave of litigation in Victoria?
Potentially. Easier identification of defendants plus a lower threshold for minors’ claims could increase suits, but costs, evidentiary demands and court capacity will moderate frivolous claims. International cases like K.G.M. suggest litigation can drive product and policy changes even when damages are modest.
Bottom line for leaders
Victoria’s proposals signal a policy trend: jurisdictions are experimenting with legal levers that make platform design and accountability relevant to real‑world harms. The core risk for businesses is procedural and operational, how a tribunal order becomes an actionable demand for data, and what standard of harm courts will accept for children. For product, safety and legal teams the immediate task is practical preparedness: document decisions, tighten disclosure processes, and engage in the consultation to shape safeguards that protect both vulnerable users and legitimate anonymous speech.
Premier Allan has placed children’s wellbeing at the centre of the pitch; the legal and technical devil is in the drafting. If you care about exposure, start the work now, legislation will be shaped in consultations, and design choices are increasingly being treated as matters of legal consequence.