There is a legislative pattern that repeats across continents, languages, and political systems. It starts with protecting children online. It ends with infrastructure capable of surveilling, censoring, and controlling entire populations.
This is not conspiracy theory. It is documented history, confirmed by courts, academics, and civil liberties organizations worldwide.
The Three-Step Playbook
The pattern is consistent across every jurisdiction that has followed it:
- Establish infrastructure under a child-safety justification
- Expand definitions through amendment (adding "extremism," "public safety," "privacy")
- Apply the infrastructure to political speech, encryption, and mass data collection
The infrastructure outlasts the original justification. Every time.
Russia: From Child Protection to Total Surveillance
2012: Federal Law 139-FZ (the "Blacklist Law") created a centralized internet blacklist, administered by Roskomnadzor, to block child sexual abuse material, drug promotion, and suicide content. No judicial oversight was required for blocks.
2013: The law was amended to cover content "suspected in extremism," "calling for illegal meetings," and "violating the established order." These categories are broad enough to encompass any political opposition.
2014 onward: The blocking infrastructure was used to suppress websites critical of the government. Freedom House documented systematic political censorship using the child-safety system.
2016: The Yarovaya Law built on this foundation. Telecom providers must now store all voice calls, data, images, and text messages for six months, plus metadata for three years. Encrypted services must provide the FSB decryption access without a court order. Human Rights Watch called it the "Big Brother Law."
2017: Russia began blocking VPNs and anonymizers using the same infrastructure.
The European Digital Rights initiative (EDRi) described the result: "a system able to monitor the Internet activities of millions of citizens and ready to ban contents considered undesirable by the Russian government."
A system built to prevent child exploitation became a system for political control. The technical infrastructure was the same. Only the target list changed.
Turkey: Child Safety to Wikipedia Bans
2007: Law No. 5651 (the "Internet Act") was enacted to protect children from child sexual abuse material, drug content, obscenity, and gambling. It created the Telecommunications Communication Presidency (TIB) with authority to monitor internet content and execute blocking orders.
2014: Amendments allowed TIB to block websites on vague "privacy protection" grounds, requiring only 48-hour ex-post judicial review. The blocking power was no longer limited to child safety content.
2014 to 2017: Turkey used the child-safety infrastructure to block Twitter, YouTube, Wikipedia (blocked for over two years), Blogger, Vimeo, and WordPress. The blocking was political, not protective.
2024: Turkey's Constitutional Court found Article 9 of Law 5651 unconstitutional due to its broad censorship applications. But by then, the infrastructure had been operating for over a decade.
Freedom House's 2024 Turkey report documents continued use of the child-safety infrastructure for political content suppression.
United Kingdom: Online Safety to Encryption Backdoors
2023: The Online Safety Act was framed as protecting children from harmful online content. It included provisions requiring messaging platforms to use "accredited technology" to scan for child sexual abuse material, effectively mandating client-side scanning that undermines end-to-end encryption.
February 2025: The UK government used the separate Investigatory Powers Act to issue a secret Technical Capacity Notice demanding Apple build a backdoor into iCloud encryption. Apple withdrew its Advanced Data Protection feature from UK users rather than comply.
July 2025: Within days of full enforcement, the Online Safety Act was used to suppress conflict footage from Gaza behind age gates. Al Jazeera called it "one of the most effective censorship tools Britain has ever built." The EFF concluded the Act "doesn't make children safer online."
Australia: Cyberbullying Protection to Global Censorship
2021: The Online Safety Act gave the eSafety Commissioner powers to order content takedowns and demand compliance from global platforms, originally to address cyberbullying and image-based abuse.
2024: The Social Media Minimum Age Bill amended the Act to ban under-16s from social media, requiring age verification infrastructure for all users.
2025: The eSafety Commissioner was rebuked three times by courts for using informal pressure to censor content beyond statutory authority. The U.S. House Judiciary Committee's July 2025 report criticized the eSafety Office for "expansive censorship powers" reflecting "a broader global trend toward state-enforced speech restrictions."
The Pattern Is the Point
Stanford Law's 2025 research on the "segregate-and-suppress" regulatory model documents how these laws share structural DNA. The Surveillance Technology Oversight Project (S.T.O.P.) published findings showing how child safety framing normalizes surveillance infrastructure that is then repurposed.
The EFF's 2023 year-in-review put it directly: "kids' online safety shouldn't require massive online censorship and surveillance."
Every country in this list followed the same sequence. The stated purpose was always sympathetic. The resulting infrastructure was always expandable. The expansion always happened.
What This Means for AB 1043
California's AB 1043, which we covered in our previous post, fits the playbook precisely. It mandates age verification infrastructure that requires identity verification at the point of content access.
The question is not whether the authors intend to protect children. The question is whether the infrastructure they're building can be repurposed. The answer, in every jurisdiction that has built similar infrastructure, has been yes.
Architecture determines outcome. Not intention.
This post is part of an ongoing series on surveillance legislation. Read the first post: Child Safety as a Backdoor to the Surveillance State.