How is children's personal data protected?
Children's personal data requires stronger protection by design because of developmental stage and online risks.
Scope of rights and proportionality review
Target age, necessity and who can consent depend on the legal basis. Notices use short clear language a child can understand; informing a parent does not always remove the need to explain to the child. Location, biometric and behavioral profiling may carry high risk. Fundamental-rights and digital-law analysis separates legality, legitimate aim, necessity and proportionality. Usefulness alone is insufficient; less restrictive alternatives and the balance between individual burden and public interest must be examined. Purpose limitation, data minimization, accuracy and limited retention apply throughout the data life cycle. Novel technology does not remove existing rights safeguards.
Digital practice, remedies and accountability
Default privacy, limited sharing, age-appropriate assurance and easy deletion are part of design. Rewards or dark patterns nudging a child to disclose more can undermine free choice. Controller roles for schools, platforms and parents are determined separately. Organizations should be able to explain what data they process, for what purpose and legal basis, for how long, and document access controls and safeguards. Data-subject requests, regulatory or court applications and content objections may follow different procedures and deadlines. Preserve the full URL, date, request record and response as well as screenshots. Because rules and authority decisions develop over time, current official guidance should be read with the facts of the case.