Philippines Adopts New Guidelines to Protect Children's Privacy Online

Philippines Introduces New Rules to Protect Children’s Data Privacy Online

The National Privacy Commission (NPC) of the Philippines has taken a major step in safeguarding children’s digital rights with the adoption of the Guidelines on Child-Oriented Transparency (No. 2024-03).

Released on 17 December 2024, these guidelines set a new standard for protecting the personal data of children across various sectors.

Ensuring Child Privacy in the Digital Age

Under the new rules, Personal Information Controllers (PICs) and Personal Information Processors (PIPs) are required to implement Child Privacy Impact Assessments (CPIAs).

These assessments must be integrated into existing Privacy Impact Assessments (PIAs) to evaluate risks and ensure protective measures for children’s data. The goal is to create a robust framework that prioritises the best interests of children and recognises their evolving capacities to understand and manage their digital interactions.

Additionally, the guidelines mandate the use of age assurance mechanisms to verify users’ ages and enhance privacy controls. These mechanisms aim to prevent unauthorised access to platforms or services that process children’s personal data.

Privacy by Default for Children’s Accounts

One of the standout features of the guidelines is the emphasis on high privacy settings by default for children’s accounts. This includes measures such as disabling geolocation services, minimising unnecessary data sharing, and ensuring that profiles are set to private unless explicitly adjusted.

These steps are designed to offer children maximum protection from potential data misuse or exploitation.

The NPC also stresses the importance of easy-to-use privacy settings, allowing children to better understand and manage their online privacy preferences. By making these controls more accessible, the guidelines aim to empower young users while maintaining necessary safeguards.

Clear and Child-Friendly Privacy Notices

The new guidelines place significant emphasis on transparency. Privacy Notices, often filled with jargon and legal terminology, must now be presented in clear and plain language tailored to a child’s understanding.

PICs are encouraged to use creative formats such as infographics, videos, and animations to make privacy-related information more engaging and comprehensible.

These notices must inform children about the purpose of data collection, the specific processing activities involved, and their rights as data subjects. The inclusion of just-in-time privacy notices—information provided at the moment data is being collected—ensures that children and their guardians remain informed throughout their digital interactions.

The guidelines further address deceptive design practices, explicitly prohibiting the use of designs or characters that manipulate children into sharing more information than necessary.

This aligns with international standards for ethical data processing and reinforces the NPC’s commitment to upholding children’s rights in the digital environment.

The introduction of layered privacy notices, tailored separately for children and adults, ensures that the unique needs of young users are met without compromising their privacy or security.

Accountability for Data Breaches

In cases of data breaches involving children’s information, the guidelines require prompt notification to both the affected children and their parents or guardians.

This approach underscores the NPC’s emphasis on transparency and its dedication to protecting children from potential harm resulting from data vulnerabilities.