Framework
Children's Data Framework
This framework defines the safeguards that apply when the organization processes personal data of children. It addresses age assurance, parental or guardian consent, special-category treatment of children's data, design defaults, profiling and ADM restrictions, and the special obligations under COPPA, GDPR-K, UK Children's Code (Age Appropriate Design Code), Quebec under-14 rules, AB 1394 and similar US state laws, and equivalents.
- Type
- Framework
- Version
- 1.0.14
- Date
- 2026-10-30
- Owner
- Data Protection Officer
- Approving authority
- Governance Library Maintainer
- Classification
- Public
- Confidentiality
- Public
- Category
- Privacy
- Review frequency
- Annual and upon material regulatory, jurisdictional, or product change
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- Purpose
- Scope
- Per-jurisdiction age thresholds (illustrative)
- Special-category treatment
- Age assurance
- Parental or guardian consent
- Design defaults (Age Appropriate Design Code style)
- Profiling and automated decision-making
- Operating expectations
- Metrics
- Framework alignment
- Limitations
Frameworks it maps to
- GDPR
- UK GDPR
- UK ICO Age Appropriate Design Code
- COPPA
- California AB 2273 (Age-Appropriate Design Code Act, 2022)
- California AB 1394 (Social Media Platform Duty to Children, 2023)
- CCPA / CPRA minor provisions
- LGPD
- PIPL
- EU AI Act
- UN Convention on the Rights of the Child General Comment 25
Related documents
- Privacy and Data Governance Policyprivacy
- Consent Management Frameworkprivacy
- Privacy Notice Templateprivacy
- Automated Decision-Making and Profiling Registerprivacy
- Privacy Jurisdiction Indexprivacy
- AI Governance and Risk Frameworkai
- Data Classification and Handling Standardsecurity
Next
All Documents