Compliance Briefing — UK Age Appropriate Design Code enters enforcement
The UK ICO began enforcing the Age Appropriate Design Code on 2 September 2021, compelling online services accessed by children to meet privacy-by-default standards and profiling limits.
The UK Information Commissioner’s Office started enforcing the Age Appropriate Design Code on 2 September 2021 after a 12-month transition. The code sets 15 standards for online services likely to be accessed by children, including data minimization, high default privacy, geolocation limits, and transparency suited to young users.
Product and privacy teams should assess whether their apps fall within scope, adjust default settings, disable unsupported profiling, and ensure age assurance processes are proportionate and well-documented to avoid ICO enforcement.
Continue in the Compliance pillar
Return to the hub for curated research and deep-dive guides.
Latest guides
-
Third-Party Risk Oversight Playbook — Zeph Tech
Operationalize OCC, Federal Reserve, EBA, and MAS outsourcing expectations with lifecycle controls, continuous monitoring, and board reporting.
-
Compliance Operations Control Room — Zeph Tech
Implement cross-border compliance operations that satisfy Sarbanes-Oxley, DOJ guidance, EU DORA, and MAS TRM requirements with verifiable evidence flows.
-
SOX Modernization Control Playbook — Zeph Tech
Modernize Sarbanes-Oxley (SOX) compliance by aligning PCAOB AS 2201, SEC management guidance, and COSO 2013 controls with data-driven testing, automation, and board reporting.