UK Legislation Database

Every act protecting children online.

Plain English guides to UK-wide and devolved legislation. Not legal advice — general legal information to help you understand your rights and obligations.

ActiveUK-wideICO (Information Commissioner's Office)

Data Protection Act 2018 & UK GDPR

Governs how organisations process personal data, including children's data. Establishes the framework for the Children's Code (AADC). Requires high standard of protection for children's data, with age-appropriate privacy notices and legitimate interest assessments.

Max Penalty

£17.5m or 4% of global turnover

ActiveUK-wideICO

Children's Code (Age Appropriate Design Code)

Statutory code of practice containing 15 standards that online services likely to be accessed by children must follow. Covers everything from data minimisation to nudge techniques, requiring "best interests of the child" as a primary design consideration.

Max Penalty

£17.5m or 4% of global turnover

Active (Implementation ongoing)UK-wideOfcom

Online Safety Act 2023

The UK's landmark internet safety legislation placing duties of care on platforms to protect users, with enhanced protections for children. Covers illegal content, content harmful to children, and transparency reporting. Implementation through Ofcom codes of practice.

Max Penalty

£18m or 10% of qualifying worldwide revenue

ActiveEnglandDfE (Department for Education)

KCSIE 2024-2025 (Keeping Children Safe in Education)

Statutory guidance for schools and colleges on safeguarding children. The 2024-2025 updates include AI-specific provisions for the first time, expanded filtering and monitoring requirements, and updated guidance on sharing nudes/semi-nudes including AI-generated images.

Max Penalty

Ofsted enforcement action

ActiveScotland / Wales / Northern IrelandScottish Government / Welsh Government / Department of Health NI

Devolved Legislation (Scotland, Wales, Northern Ireland)

Child safeguarding in the UK is not uniform. Alongside UK-wide legislation like the Data Protection Act and Online Safety Act, Scotland, Wales, and Northern Ireland each operate their own statutory frameworks for how services and schools should safeguard children.

Max Penalty

Varies by devolved framework

AUREN

Guardian AI

AUREN chat is temporarily offline for scheduled improvements. Please check back soon.

For immediate help: 999 — if someone is in immediate danger Childline: 0800 1111 — free, confidential support CEOP — ceop.police.uk for online exploitation

You can also browse our guides directly via the menu.