Regulation

The Age Appropriate Design Code (Children's Code)

A statutory code issued by the Information Commissioner, required under the Data Protection Act 2018.

What is The Children's Code?

The Children’s Code (or, more formally, the ‘Age Appropriate Design Code’) contains 15 standards that online services used by children must follow.

These standards ensure that they comply with their obligations under data protection law to protect children’s data online.

The Children’s Code came into force on 2 September 2020, but the Commissioner only began to take it into account when considering whether an online service has complied with its data protection obligations a year later.

The regulator has powers to take action against organisations that break the law, including tough sanctions like orders to stop processing data and fines of up to £17 million or 4% of global turnover (whichever is higher).

Who does The Children's Code affect?

The Children’s Code applies to “information society services (ISS) likely to be accessed by children”. The definition of an ISS is “any service normally provided for remuneration, at a distance, by electronic means and at the individual request of a recipient of services.”  If an online service is likely to be accessed by children under the age of 18, even if it’s not aimed at them, then it is probably covered by the code. Most for-profit online services are ISS and, therefore, can be covered by the code.

  • Apps;
  • Programs;
  • Search engines;
  • Social media platforms;
  • Online messaging or internet-based voice telephony services;
  • Online marketplaces;
  • Content streaming services (eg video, music or gaming services);
  • Online games;
  • News or educational websites
  • Any websites offering other goods or services to users over the internet
  • Electronic services for controlling connected toys and other connected devices

     

A digital service is not required to comply with The Children’s Code if it can demonstrate that children are unable to access it by implementing effective age assurance. If a service is required to comply with the code, it must be age-appropriate, which can require offering different content and functionalities to different age ranges under 18.  For example, what is suitable for a 17-year-old may not be suitable for a 7-year-old.

About the author

Lina Ghazal

Lina is Head of Regulatory & Public Affairs at Verifymy, with over 10 years of experience working across media and tech, in both the public and private sectors — including at Ofcom, TF1, and Meta. Lina specialises in building impactful policy initiatives and partnerships, and has worked closely with regulators, industry leaders, and civil society across Europe, the Middle East, Africa, and the US to help shape the future of online safety.
Got a question?
Contact us to learn how Verifymy can help.

Got a question?

Contact us to learn how Verifymy can help.

How can we help?

Verifymy can assist services in excluding minors altogether or determining the age range of child users so their experience can be tailored appropriately. ​

Age assurance methods

Verifymy’s age assurance solution for any online product, service or business, features the widest range of age verification and age estimation methods to ensure the highest pass rates possible with minimal business disruption.

icon-email-based-age-estimation

Email address

An age estimation method that uses an email address to accurately determine user age while preserving privacy.
icon-facial-age-estimation

Facial age estimation

An age estimation method based on a person’s facial features captured in a short selfie video.
icon-government-issued-id-scan

Government-issued ID

An age verification method that uses ID scanning to determine a user’s exact age.
icon-government-issued-id-scan

Government-issued ID and face match

An age verification method that uses government-issued IDs to determine a user's age and employs face match technology to verify ID ownership.
icon-credit-card

Credit card

An age verification method using credit card authorisation to confirm age.
icon-name-and-address

Name & address

An age verification method that uses customer order details to verify age during account creation or order processing.
icon-mobile-phone-number

Mobile phone number

An age verification method confirming the phone is in the possession of and authorised for use by a person aged 18+
Content

Get in touch

Discover how we can help you solve your compliance and safeguarding challenges.
our solutions
industries
Company
resources