The internet was not designed with children in mind, but children are emphatically on it, and after years of guidance documents and voluntary codes, regulators on several continents are shifting to enforcement. Fines have landed on major platforms for the way they handle young users’ data, age-appropriate design codes now carry legal weight, and app stores and advertisers are adjusting to rules that treat a child’s attention and information as deserving special protection. The argument is no longer about whether children merit a different standard online. It is about how that standard works in practice, and who bears the cost of getting it wrong.
In Britain, the framework is the Children’s Code overseen by the Information Commissioner’s Office, which requires services likely to be accessed by children to build privacy in by default: high-privacy settings, minimal data collection, no nudge techniques that push children to share more. Research and advocacy from bodies such as UNICEF have pressed the same principles globally. More on media and family life is on our homepage.
What platforms are being made to change
The practical changes are visible if you know where to look. Accounts for younger teenagers default to private on several major services. Behavioural advertising aimed at children is restricted or banned outright in a growing list of jurisdictions. Recommendation systems face scrutiny for amplifying harmful content to young users, and age assurance, estimating or verifying how old a user is, has become one of the industry’s busiest and most contested fields, because doing it well without collecting more intrusive data is a genuine technical puzzle.
Enforcement is what changed the incentives. When a regulator can fine a platform a percentage of global turnover, privacy engineering stops being a public-relations function. Companies now document design decisions for children’s services in advance, run impact assessments and, in the more serious cases, redesign features entirely rather than defend them. The era of launching first and apologising to a parliamentary committee later is, in this corner of the industry at least, drawing to a close.
What parents can and cannot do
None of this removes the household layer of the problem, but it does clarify what is reasonable to ask of parents. Checking an app’s data practices before a child signs up, using the privacy dashboards platforms now provide, keeping devices’ location sharing deliberate rather than default, and talking about targeted advertising in plain terms all help. What parents cannot do alone is audit an algorithm or resist design teams optimising for engagement, which is precisely why the regulatory turn matters: it puts the heaviest duties on the parties with the most power.
Balance matters too. Children have legitimate interests in exploring, creating and socialising online, and rules that simply lock everything down tend to push activity into less visible, less safe spaces. The better frameworks aim at safer participation rather than exclusion, a distinction our family and media coverage returns to often. Teenagers, in particular, are not merely victims-in-waiting in this debate; many are sophisticated users with their own views on privacy, and the most effective household rules tend to be negotiated ones.
Where the argument moves next
The frontier questions are already visible. How should rules treat AI companions and chatbots that children confide in? What counts as age assurance that respects everyone’s privacy, including adults who resent proving their age to read the news? How do smaller services, school platforms and games from two-person studios comply with duties written with tech giants in mind?
The likely direction is more specificity rather than less law: sector guidance, tested technical standards and enforcement that publicises its reasoning so the whole industry learns from each case. For families, the translation is simpler. The services children use are slowly being required to deserve the trust parents were always told to place in settings menus. That is overdue, and it is finally happening in the open.
