ICO's Age Appropriate Design Code for protecting children online - will you be ready in time?

With six months to go until the transition period ends and the Age Appropriate Design Code (also being called the "Children's Code") comes into force, will your organisation meet the 15 Standards in time?

Does the Code apply to me? If you are based in the UK and providing commercial online/connected services or products that are likely to be accessed by under-18s, then Yes! 

What first steps should we take if we're just starting to look at this now? 

1. Assess which of your products/services are "likely" to be accessed by under-18s, so you know what is covered by the Code;
2. Consider whether your Privacy Notice is fit for purpose, bearing in mind the likely ages of the children accessing your site and their level of comprehension;
3. Review whether there are any gaps in your DPIA coverage and get a plan in place to remedy this position within the time available, so that you can identify the risks and ensure relevant mitigations are put in place. 

The ICO website has a very helpful guide explaining all the relevant Standards and providing guidance on how to meet them. 

No time to delay...

We often see that organisational change takes much longer than anticipated and timelines tend to slip more than once! So, whatever stage your organisation is at now, don't delay implementation!