Control measure: There are parental controls in place to allow parents or guardians to place limits on a child’s online activity.
Risk: Without parental controls, there is a risk of online harm to a child, inappropriate access to services or content and mental or physical harm. This may breach article 5 (1) (a) of the UK GDPR and article 16 of the UNCRC.
Ways to meet our expectations:
- Include options to set time limits or bedtimes, restrict internet access to pre-approved sites or services only, and restrict in-app purchases.
- Provide resources to help parents explain the service to their child and discuss privacy with them.
- Provide resources to support age-appropriate discussion between a parent and child about potential online threats and harms.
- Provide easy access to information to help parents monitor the effectiveness of controls they have set.
- Ensure parental controls are easy to set up and manage.
Options to consider:
- Offer 'real time alerts' for parents, ranging from if a child attempts to change any privacy settings to when a child is exposed to inappropriate content.
- Remove parental controls automatically when a child turns 18, and inform both the child and parent that this has taken place.