The complaint alleges that Roblox marketed itself as a safe environment while failing to implement age and identity verification at account creation, a feature the suit calls a "design feature that leads to child endangerment." [1] Drummond said Roblox "marketed itself as a safe place for children but turned a blind eye as predators targeted and exploited minors on its platform." [1] The lawsuit represents the latest in a wave of similar actions by state AGs who argue that the platform's business model prioritizes engagement over child safety.
Lawsuit Allegations and Broader Context
Oklahoma is at least the tenth state to sue Roblox, following similar actions by Texas, Kentucky, Louisiana, Iowa, Nebraska, Tennessee, Florida and Los Angeles County. [2] Settlements with Alabama, Nevada and West Virginia have already totaled tens of millions of dollars, with the Nevada settlement requiring Roblox to strip encryption from minor users' private messages, making them readable by the company and accessible via subpoena, data breach or policy change. [1]
The lawsuits allege a pattern of safety failures, including organized abuse rings operating on the platform, adults posing as minors and internal employee statements indicating that engagement metrics were prioritized over child safety. [1] Critics of the legal push argue that the remedies being demanded – particularly biometric identity verification – risk creating a surveillance infrastructure that far exceeds the original safety concerns.
The Legal Remedy: Biometric Verification Requirements
The lawsuits and settlements demand significantly more identity verification, including biometric data collection and government ID scanning. Roblox now requires age verification through third-party vendor Persona, with options including a government ID scan or facial age estimation via a selfie video. [1] The company reported that half of its 150 million monthly active users had completed verification by early 2026, and new account tiers launching in June 2026 will lock unverified users out of most games and all communication features. [1]
Legal scholars and privacy advocates warn that these measures represent a broader push for digital identity systems. As one analysis notes, "experts warn that online age verification systems may pave the way to the full implementation of digital IDs that can keep track of people's online habits." [3] The Nevada settlement already includes requirements that Roblox make minors' private chats readable by the company – a capability that could be extended nationwide. [1]
Implications for Children's Privacy
The remedy being enacted creates a biometric surveillance system that harvests face scans and government IDs from tens of millions of children. The vendor Persona has been caught operating an identity surveillance operation that extends beyond simple age estimation, according to reporting on the settlements. [1] Children whose safety was the stated goal end up with less privacy – their facial images and identity documents processed by systems they did not consent to and cannot opt out of without losing access to the platform.
The risk to children's privacy is compounded by known data security vulnerabilities. Research on data breaches shows that "over 350 million records containing sensitive personal information have been involved in security breaches in the United States since January 2005," according to the Privacy Rights Clearinghouse. [4]
The collection of biometric data from minors creates a permanent and irreplaceable dataset that, if breached, cannot be reissued like a password. Biometric identification techniques using lasers have been proposed for decades, but the scale of deployment on a children's gaming platform is unprecedented. [5]
Conclusion: Setting a New Standard
The standard being established across multiple state lawsuits requires that children hand over biometric data in order to use a gaming platform. No third option exists between submitting a scan of one's face or government ID and losing access entirely. [1]
The pattern repeats itself. A platform fails to protect children, states sue and the legal remedy becomes a surveillance system that collects sensitive data from the very minors it claims to protect.
As privacy advocates have noted, the push for age verification is often a cover for broader digital ID mandates. [3] The Oklahoma lawsuit, while aimed at protecting children, may accelerate the adoption of biometric surveillance systems that ultimately erode privacy for all users – particularly the vulnerable demographic it intends to shield.
References
- ReclaimTheNet.org. "Oklahoma Sues Roblox, but the 'Fix' Is Biometric Checks." May 18, 2026.
- ReclaimTheNet.org. "Texas Sues Roblox Over Child Safety Failures, Joining Multi-State Push for Digital ID." November 10, 2025.
- NaturalNews.com. "U.S. States Are Passing Internet Age Verification Laws as a Cover to Compel People into Using Digital IDs." November 15, 2024.
- PDFlib PLOP 2.0.0p6 (SunOS)/Acrobat Distiller 6.0 for Macintosh. "Workplace Privacy and Data Security." The Environmental Research Letters 2010.
- Goldman Leon. "Applications of the laser."
- NaturalNews.com. "Say goodbye to your privacy: Use of digital IDs in American states is spreading rapidly." July 27, 2023.
Explainer Infographic
Editorial Cartoon
Please contact us for more information.
