Children's Data

Children’s data is treated differently in some jurisdictions.

For example, in the US, FERPA applies to educational records of students under 18, giving parents the right to access and control those records. Similarly, COPPA (the Children’s Online Privacy Protection Act) requires online services directed at children under 13 in the US to obtain parental consent before collecting their personal information. Moreover, the DUAA amends UK GDPR to require that where services are likely to be accessed by children, businesses (as data controllers) must implement stronger data ‘by design and by default’ mechanisms.

Therefore, if your business processes children’s data you must perform additional checks to ensure compliance with the regulations in your jurisdiction.