The ICO Age-Appropriate Design Code Of Practice: Steps To Take In 2021 To Protect Children's Privacy

The United Kingdom's Information Commissioner's Office (ICO) finalized a new Code of Practice (the Code) in September 2020, which applies to most companies that offer online services to or otherwise collect personal data from users in the UK, if their service is likely to be accessed by children. Given the finalization of this Code, there is no better time to resolve to stay current on children's privacy laws.

By publishing the Code, the ICO is signaling how it intends to interpret the data protection principles under the EU General Data Protection Regulation (GDPR) and UK's Privacy of Electronic Communications Regulation (PECR). As such, this means that violations of the Code could lead to GDPR-standard fines: up to ?20 million/£17.5 million, or 4% of a company's annual worldwide turnover, whichever is higher.