Children and Online Privacy

Children and online privacy involves more than hiding a profile from strangers. It includes the information a child shares, the data companies collect and the images adults publish about them. This guide helps parents and schools make practical decisions about consent, account access, AI tools and reporting.

Children and online privacy essentials

For example, names, photographs, voices, school details and location can identify a child. However, information does not need to include a full name to become revealing. A username linked across services, a uniform or a regular activity can help someone connect the details.

Services can also collect information about searches, devices and viewing habits. Therefore, reviewing a profile’s audience is only one part of protecting children and online privacy. Our Protecting Personal Information Online guide explains the wider security and scam risks.

Why it matters: Children need room to learn and grow without unnecessary exposure. Privacy protects their dignity and choices as well as their immediate safety.

Age requirements, consent and readiness

First, distinguish minimum account ages, app store ratings and parental consent rules. An app store rating describes aspects of content suitability, while an account age appears in the service’s terms. Neither guarantees that a child is ready for the experience.

In Ireland, the digital age of consent is 16 where an online service relies on consent to process a child’s personal data. Below that age, parental authorisation is required in those circumstances. This does not mean every service has a minimum account age of 16 or that all processing relies on consent.

The Data Protection Commission’s guide to children’s rights explains these distinctions. Check each service’s current terms and family features before creating an account. Do not enter a false adult birth date, because it can remove protections designed for younger users.

What age assurance can and cannot establish

Age assurance means checking or estimating someone’s age. For example, a service may use a declared birth date, a facial estimate, an identity document or another method. However, a verified age does not establish good intentions or make someone safe to contact.

Before providing a child’s information, check what the provider collects, who receives it and how long it keeps it. Therefore, use the service’s official process rather than a link sent by a stranger. Never send identity documents to another user claiming to be a moderator.

Children and online privacy settings

The European Commission’s guidance on protecting minors recommends private defaults and measures reducing harmful contact. However, families still need to review how an individual service implements protections. Rules, defaults and available settings differ by platform and account age.

• Check the account’s genuine birth date and minimum age requirements.
• Review who can see the profile, posts, friends and activity.
• Limit messages, calls, group invitations, tags and mentions where controls exist.
• Remove followers or contacts the child cannot identify.
• Turn off unnecessary live location sharing and review any existing sharing.
• Use a neutral profile image and a username that does not reveal school or age.

Why it matters: A private account reduces some exposure, but approved contacts can still screenshot or forward information. Follow the verified instructions in our Social Media Safety Settings and Messaging Apps Safety Settings.

Check camera, microphone, photos and location

For example, an app may need a camera for a video call without needing constant location access. Similarly, sharing one photograph should not automatically require giving access to every photograph. Review the permission and its purpose together.

On an iPhone

Apple’s app access guidance explains how to review access by information type. Options depend on the app and installed software.

• Open Settings.
• Select Privacy & Security.
• Select the relevant category, such as Camera, Microphone or Contacts.
• Review the listed apps and turn off access that is unnecessary.
• Repeat for other categories and check the app still works as expected.

Why it matters: Removing a permission limits future device access. It does not automatically delete information the service already holds.

On an Android phone

Use Google’s Android permissions guidance alongside your manufacturer’s instructions. Some labels and available choices vary by device.

• Open Settings, then Apps.
• Select the app, using See all apps if needed.
• Select Permissions.
• Select the permission you want to review.
• Choose Don’t allow where access is unnecessary, or the narrowest suitable option offered.
• Repeat for other permissions and review the app’s own privacy controls.

Why it matters: Device permissions and account privacy settings protect different things. Therefore, check both rather than assuming one setting covers everything.

Sharenting and respecting a child’s choices

Sharenting means sharing information about a child online. The DPC’s sharenting survey highlights privacy, autonomy and emotional wellbeing concerns. A child’s wishes should form part of the decision, rather than becoming an afterthought.

• Ask before sharing a photo when the child can express a view.
• Respect a refusal and offer a private way to share a family milestone.
• Avoid intimate, embarrassing or distressing images.
• Remove school names, addresses, medical details and live location clues.
• Agree similar boundaries with relatives and other caregivers.
• Ask schools and clubs how they manage photographs and removal requests.

Why it matters: Even a trusted audience can copy content. Our Digital Footprint guide explains how to review information already online.

Children’s privacy and AI

For example, children may share worries with a chatbot because its replies feel friendly and personal. However, a chatbot is a product, not a confidential human friend or a safeguarding professional. Avoid entering identifying school details, private messages, health information or other people’s photographs.

The DPC’s AI tips for teenagers encourage checking data use and seeking human support. Parents can also use Webwise AI Aware for age appropriate discussions about generative AI.

However, a deepfake can falsely depict a real person in an altered image or recording. If someone targets a child, support the child and report the abuse. The child is not responsible for another person’s misuse of an image, whether the original photograph was public or private.

Supervision that builds trust

Consequently, children and online privacy requires a balance between support and growing independence. Explain which activity you supervise, why and how this will change as the child matures. Avoid treating normal requests for privacy as evidence of wrongdoing.

Family controls can help manage downloads, content or time, but they do not reveal every conversation or prevent every harmful contact. Our Google Family Link guide and Apple Family Sharing guide explain available options. Follow the guide that matches the family’s device and account setup.

In addition, agree a way to seek help that does not depend on immediate punishment or losing every device. For younger children, shared spaces and regular check ins can make support easier. For teenagers, discuss recovery access and emergencies without routinely demanding every private conversation.

Children’s privacy in schools and clubs

Organisations should explain why they collect children’s information and how they use it. Ask about access, retention, security and alternatives where a family does not want public photographs. Concerns about children and online privacy also apply to classroom apps and digital homework tools.

• Check the school’s privacy information and contact the relevant staff member with questions.
• Ask whether an AI tool needs identifiable student work or personal information.
• Avoid posting pupil lists, health details or screenshots of school communications into public groups.
• Agree clear photo rules for events, livestreams and team pages.
• Use approved channels when sharing sensitive information with an organisation.

Why it matters: Informal convenience does not remove privacy responsibilities. A family group or classroom account can still expose information to unintended recipients.

Removal requests, complaints and urgent help

Start with the organisation or platform when requesting correction or removal of personal information. The DPC’s right to erasure guidance explains that exceptions apply. Keep the request and response, then use the DPC concern process if needed.

For threats, grooming or suspected crime, contact An Garda Síochána. Call 112 or 999 if someone faces immediate danger. Tusla explains how to report child protection and welfare concerns.

Hotline.ie accepts reports of suspected illegal online content, including child sexual abuse material. Do not download or circulate sexual images of children. Childline offers free phone and online support for young people who need someone to talk to.

Children and online privacy checklist

• Check account ages and privacy defaults.
• Review followers, messages and location sharing.
• Check app permissions on each device.
• Agree which family images should stay private.
• Discuss what information must stay out of AI tools.
• Secure accounts and review recovery options.
• Check school and club photo arrangements.
• Make sure the child knows where to get help.

Frequently Asked Questions

Does parental consent make every app suitable?

No. Consent, minimum account age and suitability are separate questions, so check the service’s rules and the child’s needs.

Must parents read every message?

However, not every situation requires this. Instead, choose proportionate supervision, explain it clearly and seek safeguarding advice where a specific concern requires closer support.

Does a verified account mean a safe person?

No. A check may confirm an age or identity detail, but it cannot establish someone’s intentions.

Can a child ask for an image to be removed?

Yes, a child can ask the person, platform or organisation for help. However, the appropriate process and legal outcome depend on the circumstances.

Related CODA Guides

Use Resources for Parents for practical settings and Video Guides for further learning. Our Useful Links page brings together additional reporting and support services.

References

• Data Protection Commission’s guide to children’s rights: Child data rights and parental authorisation.
• European Commission’s guidance on protecting minors: EU guidance on safeguards for services used by minors.
• Apple’s app access guidance: Official iPhone privacy and app permission instructions.
• Google’s Android permissions guidance: Official Android app permission instructions.
• DPC’s sharenting survey: Official survey and guidance on parents sharing information about children.
• DPC’s AI tips for teenagers: Current Irish advice on personal data, AI and trusted human support.
• Webwise AI Aware: Irish family education resources on generative AI.
• DPC’s right to erasure guidance: Erasure rights, circumstances and exceptions.
• DPC concern process: How to raise a data protection concern after contacting an organisation.
• An Garda Síochána: Official crime reporting and emergency information.
• Tusla: Child protection and welfare reporting.
• Hotline.ie: Reporting suspected illegal online content and intimate image abuse.
• Childline: Support for children and young people.

About Children of the Digital Age

Children of the Digital Age provides online safety education and training for families, schools and organisations. Our work brings together practical safety guidance, cybersecurity and cyberpsychology. For education and training enquiries, visit Contact Us.

Send a message

Contact us to discuss education, training or practical guidance for your family, school or organisation. Use emergency and safeguarding services for urgent concerns.

Last updated: 14 October 2026