The Age Appropriate Design Code (“AADC”) was written by the UK Information Commissioner’s Office (“ICO”) as a requirement of the Data Protection Act 2018 (Section 123). It explains how to ensure online services appropriately safeguard children’s personal data.
The Code applies if a site provides online products or services (including apps, programs, websites, games or community environments) that process personal data and are likely to be accessed by children in the UK. It is, therefore, not only for services aimed at children.
Websites should follow the code to help them process children’s data fairly. It will also enable the design of services that comply, and demonstrate compliance, with the GDPR and PECR. If websites do not follow this code, they are likely to find it more difficult to demonstrate compliance with the law, should the ICO take regulatory action against them.
Fines for breaking the code could be up to 4% of a company’s global turnover.