Children’s websites and apps to be assessed by privacy watchdogs

The Global Privacy Enforcement Network, which is made up of data protection authorities in 29 countries including the UK, France and Germany, will report on its findings in the autumn.

The Information Commissioner's Office (ICO) in the UK said it will participate in the project by assessing 50 websites and apps used by children, including some "specifically targeted at children". It said it would review what information those website operators and app providers collect from children and how they explain to users what information they will collect. It said it will also look into "what parental permission is sought".

The watchdog said it could take enforcement action against website operators or app providers if it finds their privacy practices do not adhere to the Data Protection Act (DPA).

Steve Eckersley, ICO head of enforcement, said: “In the UK, we’re clear that apps and websites should not gather more personal data than they require, and operators should be upfront about how and why they collect information and how they use it."

"These principles are true whatever the audience, but they are especially true where children are concerned. This research should give us a valuable insight into whether companies in the UK are operating compliantly, as well as how that fits with what is happening around the world," he said.

The ICO has issued guidance on what app developers can do to stay compliant with UK data protection laws. The guidance includes recommending that app developers use 'just-in-time notifications' to inform users about the imminent processing of personal data. Those notifications could be displayed on users' screens to explain how app developers intend to use personal data collected through the app and enable the developers achieve the legal standard for 'consent' under the DPA, the watchdog said.