McLaren
JF-Expert Member
- Feb 19, 2025
- 1,090
- 3,444
On January 28, while marking World Data Protection Day, the European data protection authorities said they are giving special attention to children’s personal data because children are more vulnerable online than adults.
They emphasized that protecting children’s data is a top priority and noted that the Board supports appropriate ways to verify a user’s age to ensure children do not access harmful or age-inappropriate content
They further explained that while age-verification measures are important for protecting children online, such measures must respect privacy and collect only the minimum personal data necessary. The authorities stressed that safeguards should be proportionate and designed in a way that does not expose children to additional risks.
=================================
Every day, the European Data Protection Authorities (DPAs) that make up the EDPB work together to ensure the protection of individuals’ personal data. When it comes to children's data, extra vigilance is essential, particularly in today's fast-evolving digital environment where new risks emerge constantly.
Children are more at risk online than adults because they do not easily recognise dangers, tend to trust strangers too much, and may share personal data without realising. The apps they use often collect their data and, without adequate protections, they can be exposed to harmful content. These risks can follow them throughout their lives, affecting their privacy and leaving long-term digital footprints that are difficult to erase.
The EDPB’s commitment in action
Protecting children’s data is a strategic priority for the EDPB and the Board has delivered important advances in safeguarding children's digital rights.
In February 2024, the EDPB adopted a Statement on the legislative developments regarding the Proposal for a Regulation to prevent and combat child sexual abuse. The Statement follows the EDPB-EDPS Joint Opinion on the same proposal.
In February 2025, the EDPB has also adopted a Statement on age assurance aimed at helping organisations assess individuals’ age in a GDPR-complaint way. Age assurance is essential to ensure that children do not access content that is not appropriate for their age. At the same time, the method to verify age must be the least intrusive possible and the personal data of children must be protected.
In its statement on age assurance, the EDPB lists ten principles for the compliant processing of personal data when determining the age or age range of an individual. The EDPB supports measures to determine whether someone is above a certain age threshold, but only when these measures are proportionate and follow key EU data protection principles such as protecting privacy by default.
Source: European Data Protection Board
They emphasized that protecting children’s data is a top priority and noted that the Board supports appropriate ways to verify a user’s age to ensure children do not access harmful or age-inappropriate content
They further explained that while age-verification measures are important for protecting children online, such measures must respect privacy and collect only the minimum personal data necessary. The authorities stressed that safeguards should be proportionate and designed in a way that does not expose children to additional risks.
=================================
Every day, the European Data Protection Authorities (DPAs) that make up the EDPB work together to ensure the protection of individuals’ personal data. When it comes to children's data, extra vigilance is essential, particularly in today's fast-evolving digital environment where new risks emerge constantly.
Children are more at risk online than adults because they do not easily recognise dangers, tend to trust strangers too much, and may share personal data without realising. The apps they use often collect their data and, without adequate protections, they can be exposed to harmful content. These risks can follow them throughout their lives, affecting their privacy and leaving long-term digital footprints that are difficult to erase.
The EDPB’s commitment in action
Protecting children’s data is a strategic priority for the EDPB and the Board has delivered important advances in safeguarding children's digital rights.
In February 2024, the EDPB adopted a Statement on the legislative developments regarding the Proposal for a Regulation to prevent and combat child sexual abuse. The Statement follows the EDPB-EDPS Joint Opinion on the same proposal.
In February 2025, the EDPB has also adopted a Statement on age assurance aimed at helping organisations assess individuals’ age in a GDPR-complaint way. Age assurance is essential to ensure that children do not access content that is not appropriate for their age. At the same time, the method to verify age must be the least intrusive possible and the personal data of children must be protected.
In its statement on age assurance, the EDPB lists ten principles for the compliant processing of personal data when determining the age or age range of an individual. The EDPB supports measures to determine whether someone is above a certain age threshold, but only when these measures are proportionate and follow key EU data protection principles such as protecting privacy by default.
Source: European Data Protection Board
