ICO warns platforms to implement privacy-preserving age assurance systems

The Information Commissioner's Office (ICO) has issued a statement outlining its commitment to protecting children's privacy and online safety. The regulator stated that companies declaring their services suitable only for those above a minimum age must implement effective measures to prevent access by underage children.

Following formal requests sent in March to major platforms, including TikTok, Snapchat, Facebook, Instagram, YouTube, and X, the ICO concluded that although some services are implementing or considering additional steps, none have introduced new, viable, and privacy-friendly age-assurance solutions.

As a consequence, the ICO lacks confidence that appropriate measures are being implemented and therefore remains concerned that underage children's data continues to be processed. The ICO said it's also concerned about the limited progress and is considering its next steps, while standing ready to deploy its full regulatory powers, including formal investigations and sanctions.

The ICO continues to collaborate closely with Ofcom to ensure underage users cannot access unsuitable services. 

Training Announcement: The IAPP Certified Information Privacy Technologist (CIPT) is a privacy-focused professional IT certificate from the IAPP that addresses data protection requirements and controls within complex technological environments. It explores the data lifecycle, privacy risk models and frameworks, the principles of Privacy by Design, and the role of privacy-enhancing technologies within the organisation. Find out more.