Skip to content
Solved
ConnectSearchBrowseDocs
Sign in

Contents

Legislation
Data Protection Act 2018

Crossheading Codes of practice

  • Section 121 Data-sharing code
  • Section 122 Direct marketing code
  • Section 123 Age-appropriate design code
  • Section 124 Data protection and journalism code
  • Section 124A Other codes of practice
  • Section 124B Panels to consider codes of practice
  • Section 124C Impact assessments for codes of practice
  • Section 125 Approval of codes prepared under sections 121 to 124A
  • Section 126 Publication and review of codes issued under section 125(4)
  • Section 127 Effect of codes issued under section 125(4)
  • Section 128 Other codes of practice
  1. Codes of practice
  2. Age-appropriate design code

Section 123 | Age-appropriate design code

From legislation.gov.uk

(1)The Commissioner must prepare a code of practice which contains such guidance as the Commissioner considers appropriate on standards of age-appropriate design of relevant information society services which are likely to be accessed by children.

(2)Where a code under this section is in force, the Commissioner may prepare amendments of the code or a replacement code.

(3)Before preparing a code or amendments under this section, the Commissioner must consult the Secretary of State and such other persons as the Commissioner considers appropriate, including—

(a)children,

(b)parents,

(c)persons who appear to the Commissioner to represent the interests of children,

(d)child development experts, and

(e)trade associations.

(4)In preparing a code or amendments under this section, the Commissioner must have regard—

(a)to the fact that children have different needs at different ages, and

(b)to the United Kingdom's obligations under the United Nations Convention on the Rights of the Child.

(5)A code under this section may include transitional provision or savings.

(6)Any transitional provision included in the first code under this section must cease to have effect before the end of the period of 12 months beginning when the code comes into force.

(7)In this section—F1

“age-appropriate design” means the design of services so that they are appropriate for use by, and meet the development needs of, children;

“information society services” has the same meaning as in the UK GDPR, but does not include preventive or counselling services;

“relevant information society services” means information society services which involve the processing of personal data to which the UK GDPR applies;

“standards of age-appropriate design of relevant information society services” means such standards of age-appropriate design of such services as appear to the Commissioner to be desirable having regard to the best interests of children;

“trade association” includes a body representing controllers or processors;

“the United Nations Convention on the Rights of the Child” means the Convention on the Rights of the Child adopted by the General Assembly of the United Nations on 20 November 1989 (including any Protocols to that Convention which are in force in relation to the United Kingdom), subject to any reservations, objections or interpretative declarations by the United Kingdom for the time being in force.

Notes

  1. F1

    Words in substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 53 (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

PreviousNext
PrivacyTerms