Max Penalty
£17.5m or 4% of global turnover
Statutory code of practice containing 15 standards that online services likely to be accessed by children must follow. Covers everything from data minimisation to nudge techniques, requiring "best interests of the child" as a primary design consideration.
Key Points
15 standards covering the full lifecycle of children's data
Applies to any service "likely to be accessed by children"
Default settings must be privacy-protective ("high privacy by default")
Profiling of children is restricted unless there is a compelling reason
Nudge techniques must not be used to encourage data disclosure
Geolocation data must be off by default for children
Guardian AI
AUREN chat is temporarily offline for scheduled improvements. Please check back soon.
For immediate help: • 999 — if someone is in immediate danger • Childline: 0800 1111 — free, confidential support • CEOP — ceop.police.uk for online exploitation
You can also browse our guides directly via the menu.