Australian Watchdog Prepping Children's Online Privacy Code

Young people spend much of their lives online, and they're often expert-level internet users, the office said. But that doesn't mean the digital world is "all sunshine and 'double rainbows.'"

As children grow, so does the amount of personal information and data that businesses, government agencies and others hold about them, OAIC noted: By the time a child turns 13, there are 72 million pieces of data collected about them, estimates show.

As such, that exposes young people to potentially harmful but commonplace data practices such as profiling, direct marketing and targeted advertising, as well as emerging harms from AI. The high level of data collection also leaves young people at risk from breaches, identity theft, discrimination and algorithmic bias, the office noted.

Australia's Privacy and Other Legislation Amendment Act 2024 directed the OAIC to develop a children's online privacy code. The code aims to strengthen privacy protections for children and young people, and the office said it will conduct extensive consultations to ensure it meets community expectations.

The consultations are occurring in phases, ensuring a wide range of voices is heard, the OAIC said. Phase one, which launched in January, was an initial discussion with children, parents and relevant organizations focused on children's welfare. Phase 2, which began this month, involves engaging with industry, civil society and academia. The final phase, a public consultation on the draft code, will begin next year, the office said.

The office will host a webinar for interested stakeholders on its next steps in mid-May.