UK Children's Code

The UK's Age Appropriate Design Code, commonly known as the Children's Code, is a statutory data protection code of practice that sets out 15 standards for online services to ensure they protect children's privacy and personal data.

Enforced by the Information Commissioner's Office (ICO) since September 2021, the Code applies to a wide range of "information society services" (ISS) likely to be accessed by children under 18, including apps, social media platforms, online games, and connected toys. Its core principle requires that the best interests of the child be a primary consideration in design, mandating high privacy settings by default and restricting data collection to only what is necessary.

🛡️ Key Privacy and Security Provisions The Code's standards require organizations to implement robust protections for young users:

Standard Category	Key Requirements
Default Settings	Set the highest privacy levels by default (e.g., private accounts, geolocation off).
Data Handling	Minimize data collection, avoid data sharing, and prohibit using data in ways detrimental to a child's wellbeing.
User Control	Switch off profiling for targeted ads by default; avoid manipulative "nudge techniques".
Transparency	Provide clear, age-appropriate privacy information and tools.

The Code has prompted significant changes from major tech firms. For instance, Instagram made accounts for under-18s private by default, TikTok limited nighttime notifications, and YouTube turned off autoplay for teens. The ICO actively enforces the Code, with powers to issue substantial fines for non-compliance.

🛡️ Key Privacy and Security Provisions The Code's standards require organizations to implement robust protections for young users:

Standard Category Key Requirements Default Settings Set the highest privacy levels by default (e.g., private accounts, geolocation off). Data Handling Minimize data collection, avoid data sharing, and prohibit using data in ways detrimental to a child's wellbeing. User Control Switch off profiling for targeted ads by default; avoid manipulative "nudge techniques". Transparency Provide clear, age-appropriate privacy information and tools. The Code has prompted significant changes from major tech firms. For instance, Instagram made accounts for under-18s private by default, TikTok limited nighttime notifications, and YouTube turned off autoplay for teens. The ICO actively enforces the Code, with powers to issue substantial fines for non-compliance.