Protecting Children Online in South Africa

As children increasingly participate in digital spaces, South Africa faces a complex regulatory question: how should the law protect children from online harm without unduly restricting their rights to access information, participate in society, and develop digital competence?

Recent international developments — particularly age-based restrictions on social media access in jurisdictions such as Australia and the United Kingdom — have renewed public debate on whether similar measures should be adopted locally. But are blanket age bans the right solution for protecting children online in South Africa, or should the focus be on digital literacy, enforcement, and platform accountability?

Minister of Communications and Digital Technologies, Solly Malatsi, has cautioned against treating social media age bans as a complete answer to the risks children face online. He argues that South Africa should avoid measures that are difficult to enforce in practice and instead focus on:

• Strengthening the implementation of existing laws.
• Improving digital literacy among parents, caregivers, and schools.
• Requiring greater accountability from digital platforms.

This article examines the existing legal framework for child protection online in South Africa, the limits of blanket age bans, and why a comprehensive approach — combining regulation, education, and enforcement — offers the most sustainable path forward.

The Existing South African Legal Framework for Online Child Protection

South Africa has no single consolidated statute that deals exclusively with children’s online safety. Instead, a network of overlapping legislative instruments regulates child protection in the digital environment. Understanding this framework is essential for parents, educators, and policymakers alike.

The Cybercrimes Act

The Cybercrimes Act criminalises a range of online offences that affect children, including:

• The unlawful disclosure of intimate images (revenge porn).
• The creation, distribution, or possession of child sexual abuse material (CSAM).
• Online grooming and related predatory conduct.
• Cyberbullying and harassment where it amounts to a criminal offence.

The Cybercrimes Act is one of the most important tools for addressing cyberbullying and online harms in South Africa, providing a statutory basis for prosecution where conduct crosses the threshold from civil wrong to criminal offence.

The Protection of Personal Information Act (POPIA)

The Protection of Personal Information Act, 2013 (“POPIA”) affords children enhanced protection in relation to the processing of their personal information. Under POPIA:

• The personal information of children is classified as special personal information.
• Processing a child’s personal information is generally prohibited unless an exception applies.
• Organisations must obtain prior authorisation from the Information Regulator before processing certain categories of children’s personal information.

POPIA’s protections are particularly relevant where social media platforms, educational apps, and online services collect, process, or share data relating to minors.

The Films and Publications Act

The Films and Publications Act framework empowers the Film and Publication Board (“FPB”) to:

• Classify content according to age appropriateness.
• Issue take-down notices for harmful digital material.
• Respond to online content that may be harmful to children, including exposure to explicit material, violence, and other age-inappropriate content.

The FPB operates a hotline through which members of the public can report harmful or illegal online content, making it a key reporting channel for online child protection in South Africa.

Collectively: A Foundation, Not a Finish Line

Collectively, these laws already provide a foundation for addressing online harms affecting children in South Africa. However, their effectiveness depends on:

• Practical enforcement and adequate institutional capacity.
• Proper reporting channels that are accessible to children and caregivers.
• Cooperation from technology companies — including social media platforms and internet service providers.
• Public awareness — parents and educators must understand how children are exposed to risk.

A robust legal framework is of limited value if criminal complaints are not investigated promptly, harmful content is not removed timeously, and parents or educators do not understand how children are exposed to risk online.

The Limits of Blanket Social Media Age Bans in South Africa

Age restrictions on social media may seem attractive because they offer a simple, visible response to a serious social problem. In practice, however, they face significant limitations:

They Are Difficult to Enforce

Children may:

• Misrepresent their ages when creating accounts.
• Use adults’ devices to access platforms.
• Create alternative accounts after being blocked.
• Bypass restrictions through technological workarounds such as VPNs.

A formal prohibition that is easily avoided risks creating a false sense of protection while leaving the underlying harms — cyberbullying, online grooming, sextortion, and exposure to harmful content — unresolved.

They May Infringe Children’s Constitutional Rights

There is also a constitutional dimension. Under the South African Constitution, children are entitled to:

• Protection from exploitation and abuse (section 28).
• Dignity (section 10).
• Privacy (section 14).
• Education (section 29).
• Freedom of expression (section 16).
• Participation in community life.

An approach that focuses solely on exclusion from digital spaces may undermine the development of digital resilience and may prevent children from acquiring the skills necessary to navigate online environments safely and responsibly. Instead of shielding children from the digital world, the law should help prepare them to participate in it with discernment.

Digital Literacy as a Child Protection Measure in South Africa

Digital literacy in South Africa is more than technical competence. It is a critical child protection measure that includes the ability to:

• Recognise online grooming — understanding how predators build trust with children online.
• Identify sextortion — knowing the warning signs of coerced image-sharing and blackmail.
• Respond to cyberbullying — recognising harassment, preserving evidence, and reporting it.
• Spot misinformation — evaluating the credibility of online content and AI-generated material.
• Understand privacy risks — recognising the consequences of sharing personal information or images.
• Identify AI-generated content — being aware of deepfakes, synthetic media, and manipulated images.

The Role of Parents, Caregivers, and Schools

Parents, caregivers, and schools play a critical preventative role. Children should be taught not only how to use technology, but how to:

• Evaluate risk in online interactions.
• Report harm through the appropriate channels.
• Preserve evidence — including screenshots, usernames, dates, and links.
• Seek assistance from trusted adults, authorities, or helplines.

Cyberbullying in South African schools is a growing concern, and schools that integrate digital literacy into their curricula are better equipped to prevent and respond to online harms affecting their learners.

Platforms Must Also Be Accountable

Importantly, digital literacy does not absolve platforms from responsibility. Social media companies and digital service providers must:

• Adopt stronger age-assurance mechanisms that go beyond self-declaration.
• Improve reporting and take-down processes for harmful content.
• Label AI-generated content where appropriate, so users can distinguish authentic from synthetic media.
• Design products with children’s best interests in mind — not prioritise engagement metrics over safety.

A regulatory approach that places all responsibility on parents and children would be inadequate, particularly where global technology companies profit from high levels of user engagement. Platform accountability must be a core pillar of any online child protection strategy.

Enforcement Must Match the Scale of the Harm

The most pressing challenge in protecting children online in South Africa is not necessarily the absence of law, but the ability to enforce the law quickly and consistently.

Online harms involving children often require urgent intervention, especially where:

• Intimate images are being circulated without consent.
• Child sexual abuse material (CSAM) has been shared.
• Impersonation or identity theft is being used to harass or exploit a child.
• AI-generated content depicting a child is being distributed.

What Effective Enforcement Requires

Effective protection requires:

• Trained investigators who understand digital evidence and online offending patterns.
• Responsive prosecutors who can act quickly in urgent cases.
• Accessible reporting mechanisms that children and caregivers can use without barriers.
• Cooperation between regulators and platforms — including timely responses to take-down requests.
• Meaningful consequences for offenders — including prosecution under the Cybercrimes Act.

Institutions such as the Film and Publication Board, the South African Police Service (SAPS), schools, and child protection organisations must also operate within clear referral pathways. When harmful content is identified, affected children and their caregivers should know:

• Where to report it — the relevant platform, the FPB hotline, or SAPS.
• How to preserve evidence — screenshots, URLs, timestamps, and usernames.
• When urgent legal or law enforcement intervention is required — and how to obtain it.

How to Report Cyberbullying and Online Harm in South Africa

If a child is experiencing cyberbullying, online grooming, sextortion, or exposure to harmful content in South Africa, the following reporting channels are available:

1. Report to the platform — use the platform’s in-app reporting tools to flag the content or conduct.
2. Report to the Film and Publication Board hotline — for harmful or illegal online content, including child sexual abuse material.
3. Report to the South African Police Service (SAPS) — where criminal conduct is suspected, including under the Cybercrimes Act.
4. Report to the school — where the harm involves learners, schools can take disciplinary and supportive action.
5. Contact child protection organisations — such as Childline South Africa, which offers counselling and support for children facing online harm.
6. Consult an attorney — for legal advice on civil remedies, protection orders, or escalation where criminal complaints are not pursued.

Preserving evidence is critical. Before reporting, save screenshots, record usernames, note dates and times, and copy URLs. This evidence will be essential for any investigation or legal action.

Practical Steps for Parents, Caregivers, and Schools

Parents, caregivers, and schools can take the following practical steps to protect children online:

• Discuss online risks with children in age-appropriate language, including cyberbullying, grooming, sextortion, privacy, and AI-generated content.
• Set clear household or school rules regarding device use, social media access, privacy settings, and screen time.
• Encourage children to report uncomfortable or harmful online interactions without fear of punishment or having their device confiscated.
• Review platform privacy settings and parental controls — while recognising that controls are not a substitute for supervision and education.
• Preserve evidence of harmful conduct, including screenshots, usernames, dates, links, and correspondence.
• Report harmful or unlawful content to the relevant platform, the FPB hotline where applicable, and law enforcement where criminal conduct is suspected.
• Teach digital literacy skills — help children develop the ability to evaluate risk, recognise manipulation, and make safe choices online.
• Stay informed about emerging online threats, including AI-generated content, deepfakes, and new platforms that children may use.

Conclusion: A Realistic, Enforceable, and Rights-Sensitive Approach

South Africa’s response to online child protection should be realistic, enforceable, and rights-sensitive. While age bans may be politically appealing, they are unlikely to provide comprehensive protection if they can be bypassed and if enforcement systems remain under-resourced.

A more sustainable approach is to:

1. Strengthen existing legislation — ensure the Cybercrimes Act, POPIA, and the Films and Publications Act are effectively implemented and updated as technology evolves.
2. Improve investigative and prosecutorial capacity — train law enforcement to respond swiftly to online harms involving children.
3. Hold platforms accountable — require social media companies and digital service providers to prioritise child safety in their design and operations.
4. Equip children, parents, and schools with digital literacy — so they can identify, report, and respond to online risks effectively.

Protecting children online is therefore not a matter of choosing between regulation and education. It requires both. The law must be capable of responding decisively to harm, while society must ensure that children are not merely shielded from the digital world, but prepared to participate in it safely, lawfully, and with discernment.