Preparing for the General Data Protection Regulation (GDPR) – 12 steps to take now…
The 12 steps to take now guidance highlights changes that will be coming into effect regarding data held about children.


8) Children
GDPR brings in a special protection for children’s personal data (particularly in the context of commercial internet services e.g. social networking) and in the UK this is likely to be defined as anyone under 13 - though there are ongoing discussions about whether this should be 16. Start thinking now about putting systems in place to:

  • Verify individual’s ages 
  • Gather verifiable parental or guardian consent so you can process data lawfully 
  • Ensure your privacy notice is written in language that children can understand