With the increased exposure to the internet that children experience, it is important to protect their privacy and ensure their safety. The UK’s Age Appropriate Design Code, also known as the Children’s Code, is a regulation designed to address these concerns. Introduced by the Information Commissioner’s Office (ICO), the Code sets a new standard for how online services must treat children’s data. In this blog post, we’ll explore what the Age Appropriate Design Code is, why it was implemented, and what it means for businesses and children in the UK.
What Is the Age Appropriate Design Code?
The Age Appropriate Design Code is a statutory code of practice that provides specific guidance for information society services likely to be accessed by children under the age of 18. It came into effect on September 2, 2020, with a 12-month transition period for businesses to comply, making it enforceable as of September 2021. The Code consists of 15 standards that aim to ensure that children’s best interests are the primary consideration when designing and developing online services and falls under the Data Protection Act 2018.
The regulation applies to a wide range of online services, including websites, apps, social media platforms, online games, and even connected toys—essentially any digital service that might be accessed by children.
Why Was the Code Implemented?
The Age Appropriate Design Code was implemented to address growing concerns about how children’s data is collected, used, and shared online. Before the Code, many digital services treated children’s data the same way as adult data, leading to risks such as:
- Invasive Data Collection: Many platforms collected vast amounts of personal data from children without fully considering the implications for their privacy and security. This data protection law aims to forbid companies from encouraging children to provide unnecessary personal data.
- Targeted Advertising: Children were often exposed to targeted advertising, which could influence their behaviour and decisions in ways that are not always in their best interest.
- Lack of Transparency: Children and their parents often lacked clear information about how their data was being used, making it difficult to make informed choices about their online activities.
Recognising these issues, the ICO developed the Age Appropriate Design Code to create a safer, more transparent online environment for children. The Code aligns with the principles of the General Data Protection Regulation (GDPR) but provides additional protections specific to children.
Key Principles of the Age Appropriate Design Code
The Age Appropriate Design Code outlines 15 key standards that online services must adhere to when designing their platforms and collecting data from children. Some of the most important principles include:
- Best Interests of the Child: Services must prioritise the best interests of the child in all data processing activities, ensuring that their well-being is at the forefront of design decisions. They should also never encourage children to provide unnecessary personal data.
- Data Minimisation: Only the minimum amount of data necessary for the service to function should be collected. This principle helps protect children from unnecessary data exposure.
- Default Settings: Privacy settings for children’s accounts should be set to the highest level of protection by default. Children should not have to opt into privacy protections—they should be built in from the start.
- Transparency: Information about data collection and use should be presented in a way that is clear and accessible to children. This means using language and formats that are appropriate for their age and understanding.
- Parental Controls: Services should provide tools and settings that allow parents to manage and monitor their children’s online activities, ensuring a safer online experience.
- Age Verification: Where appropriate, online services should implement robust age verification mechanisms to prevent children from accessing content that is not suitable for their age.
- Geolocation: By default, geolocation services should be turned off to prevent children from being tracked without their explicit consent and understanding.
Impact on Businesses
For businesses operating online services in the UK, the Age Appropriate Design Code represents a significant shift in how they must handle children’s data. Companies are required to assess their services to determine if children are likely to use them, and if so, they must ensure compliance with the Code’s standards.
Non-compliance with the Code for any online service can lead to substantial fines, reputational damage, and potential legal challenges. More importantly, companies that fail to comply risk losing the trust of parents and young users, which can have long-term negative impacts on their brand.
However, the Code also presents an opportunity for businesses to lead in ethical design and build trust with families by demonstrating a commitment to child safety and privacy. Companies that prioritise compliance can differentiate themselves in a competitive market by offering a safer, more responsible user experience.
What It Means for Children and Parents
For children, the Age Appropriate Design Code offers enhanced protection and greater control over their online experiences. It ensures that their privacy is respected, their data is handled responsibly, and they are not exposed to harmful or inappropriate content.
For parents, the Code provides peace of mind by requiring online services to be more transparent and to offer better tools for managing their children’s online activities. This empowers parents to make informed decisions about the digital platforms their children use and helps them to protect their children in the increasingly complex digital world.
Last Thoughts
The UK’s Age Appropriate Design Code is an important regulation that sets a new standard for child online safety. By prioritising the best interests of children and ensuring that their data is handled with care, the Code represents a significant step forward in protecting young users. For businesses, compliance with the Code is not just a legal obligation but a moral one. By embracing the principles of the Age Appropriate Design Code, companies can play a crucial role in creating a safer, more trustworthy online environment for children, while also building a reputation for responsible and ethical practices.
FAQ
