Blog: Age Appropriate Design Code, Data Protection Bill

Data protection laws are changing, and children’s online rights are now at the forefront of the debate. 

The European General Data Protection Regulation (‘GDPR’) comes into force in the UK on May 25th 2018. It will give individuals greater control over their personal data and make it easier for them to access it. The ambition behind the EU-wide regulation is to strengthen citizens’ rights and build trust in the digital age. Whilst the GDPR acknowledges that children (those under 18) merit “specific protections” in relation to their data, it offers little guidance on what this higher standard means in practice. 

In September 2017, Government introduced the Data Protection Bill (‘the Bill’). The Bill sets our UK-specific derogations from the GDPR, it standardises UK data protection law and confirms that the UK will continue to comply with the GDPR post-Brexit. During the passage of the Bill, Baroness Kidron, with the support of Lord Ashton of Hyde (Parliamentary Under-Secretary, Department for Digital, Culture, Media and Sport), Lord Stevenson of Balmacara, (Labour Spokesperson), Baroness Harding (Conservative Peer and former CEO of TalkTalk) and Lord Clement-Jones (Liberal Democrat Spokesperson), tabled a set of amendments, introducing the ‘Age-Appropriate Design Code’ (‘the Code’).  The Kidron amendments were adopted by Government and now sit at clauses 123-126 of the Bill. 

When creating the Code, the Information Commissioner – the UK’s data regulator – is required to consider the development needs of children: that a child’s capacity to act and understand is limited by vulnerabilities and immaturities associated with their age and development stage. The Commissioner must also consider the UK’s obligations as a signatory to the UN Convention on the Rights of a Child, including the obligation to act in the “best interests” of a child. 

Aspects of design for which higher standards will be set for children include: 

  • Default privacy settings
  • Data minimisation 
  • Presentation of language of terms and conditions and privacy notices
  • Uses of geo-location technology
  • Automated and semi-automated profiling
  • Transparency of paid for activity, such as product placement and marketing
  • Sharing and resale of data
  • Strategies used to encourage extended user engagement
  • User reporting and resolution processes and systems
  • Ability to understand and activate a child’s right to erasure, rectification and restriction
  • Ability to access advice from independent, special advocates on all data rights
  • Any other aspect of design that the Commissioner considers relevant

The Code has widespread support, including from senior politicians and peers across the political spectrum, as well as from children’s charities, the NSPCC and the Children’s Society. 

In drawing up the Code, the Information Commissioner must consult with children, parents, child advocates, child development experts and trade associations. The Information Commissioner has 18 months from the date on which the Bill is passed to draft the Code. It will then be laid before Parliament for approval. As the first step in its consultation process, the Information Commissioner’s Office will shortly publish an open Call for Evidence, which will be available on their website. 

The Code is a statutory code and must be taken into account by the Commissioner when exercising her duties. Organisations who ignore it risk fines of up to £18 million or 4% of global turnover. 

The introduction of a high standard of data protection and rights for children is welcomed by 5Rights. The Code is an important step in recognising that a child is a child – even online. 

“I hope that all of us can now continue to work to make certain that the same principle is reflected in every aspect of a child’s digital life. There is still much to do. It is stated on the face of the bill that the Code must meet the development needs of children and that the regulator must take account of children, parents and those who advocate for children’s rights online, as well as industry. It is up to us all to make sure that the Code is robust, meaningful and effective for children.” – Baroness Kidron, Founder of 5Rights

Young Scot 2018 Year of Young People Summit

Read More

Algorithmic Research Group Unbias Showcase the Outcomes of their Project, Our Future Internet: From Bias to Trust

Read More

General Comment on the Digital Environment

Read More

The UN Broadband Commission for Sustainable Development Meet in New York

Read More

5Rights Responds to the Call for Evidence on the Age Appropriate Design Code

Read More

GSMA Mobile World Congress Americas

Read More

Baroness Kidron Writes a Blog for Apolitical: ‘Kids Are Growing Up Online – We Need To Redesign The Digital World For Them’

Read More

NSPCC: How Safe Are Our Children? Conference

Read More

‘Disrupted Childhood: The Cost of Persuasive Technology’

Read More

Blog: Age Appropriate Design Code, Data Protection Bill

Read More

5Rights in the News: UNESCO, Paris: Mobile Learning Week, “Skills for a connected world”

Read More

5Rights in the News: Consortium for School Networking’s Annual Conference, Washington

Read More

5Rights in the News: 5Rights Young Scot Youth Leadership Group Launch

Read More

‘Digital Childhood’ Report Launched at BBC’s Children’s Global Media Summit

Read More

5Rights Partner with BT to Co-Create with Children on Digital Literacy

Read More

Baroness Kidron at the World Congress for Child Dignity in the Digital World at the Vatican, Rome

Read More

Young Scot 5Rights Youth Commission Publish ‘Our Digital Rights’ Report

Read More

5Rights Conducts Youth Juries Across the UK

Read More