糖心TV

The Information Commissioner鈥檚 Office has published (the Children鈥檚 Code).

In what circumstances does the Children鈥檚 Code apply?

The Children鈥檚 Code defines 鈥渃hildren鈥� as people aged under 18 years. The Children鈥檚 Code applies where the University provides 鈥渋nformation society services鈥� which are likely to be accessed by children. This definition is likely to include children who are prospective or current undergraduate students (typically aged 16 and 17 years).

鈥淚nformation society services鈥� are services normally provided for remuneration, at a distance, by electronic means and at the individual request of a recipient of services. This definition is likely to include the University鈥檚 e-learning platforms. Websites which only provide information about a real-world organisation or service are not caught by this definition.

What are the requirements of the Children鈥檚 Code?

We comply with the standards set out in the Children鈥檚 Code:

1. The best interests of the child are the primary consideration when we design and develop online services.
2. We conduct Data Protection Impact Assessments to assess and mitigate risks to the rights and freedoms of children who are likely to access our services, and we take into account children鈥檚 differing ages, capacities and development needs.
3. We take a risk-based approach to recognising the age of individual users and treat children accordingly.
4. Our privacy notices are concise, prominent and use clear language suited to the age of the child.
5. We must not use children鈥檚 personal data in ways that have been shown to be detrimental to their wellbeing or that go against industry codes of practice, other regulatory provisions or statutory guidance.
6. We uphold our published terms, policies and standards.
7. Our settings are 鈥榟igh privacy鈥� by default except where we can demonstrate a compelling reason for a different default setting.
8. We collect and maintain the minimum amount of personal data needed to provide the elements of our service in which a child is actively and knowingly engaged.
9. We do not share children鈥檚 personal data unless we can demonstrate a compelling reason to do so taking into account their best interests.
10. We switch geolocation options 鈥榦ff鈥� by default unless we can demonstrate a compelling reason to switch them 鈥榦n鈥� by default.
11. We will give children age-appropriate information about any 鈥榩arental controls鈥� that we provide.
12. We switch profiling options 鈥榦ff鈥� by default unless we can demonstrate a compelling reason to switch them 鈥榦n鈥� by default, and we only allow profiling where appropriate measures are in place to protect the child from any harmful effects.
13. We do not use 鈥榥udge techniques鈥� to lead or encourage children to provide unnecessary personal data or weaken or turn 鈥榦ff鈥� their privacy protections.
14. We include effective, prominent and accessible tools to help children to exercise their data protection rights and to report concerns (including in any toys or devices which we may provide).

What are the key considerations if working with children aged 16 or 17 years?

By this age many children have developed reasonably robust online skills, coping strategies and resilience. However they are still developing cognitively and emotionally and should not be expected to have the same resilience, experience or appreciation of the long term consequences of their online actions as adults may have.

Technical knowledge and capabilities may be better developed than their emotional literacy or their ability to handle complex personal relationships. Their capacity to engage in long term thinking is still developing and they may still tend towards risk taking or impulsive behaviours and be susceptible to reward based systems.

Parental support is more likely to be viewed as one option that they may or may not wish to use, rather than as the preferred or only option, and they expect a reasonable level of autonomy. Signposting to other sources of support in addition to parental support is important.

If relying on consent as a lawful basis for processing in the context of offering an online service directly to a child, UK children aged 16 or 17 years can provide their own consent to the processing of their personal data.