What the Children’s Online Privacy Code means for Aussies under 16

Imagine if every game you played, every video you watched and every app you used was collecting information about you without you even knowing. A new Children’s Online Privacy Code is designed to help prevent that. The code will introduce special rules to make websites, apps and online games put kids’ privacy first, helping to keep personal information safer and making the internet a fairer place for young people.

The code, which will be introduced in December 2026, is being developed by Australia’s Office of the Australian Information Commissioner (OAIC). Its job is to make sure organisations, businesses, schools and websites look after people’s personal information safely.

Personal information is things like your name, address, email, phone number, school, birthday, photos or videos of you, your location and online activity.

Dr Maša Popovac, a cyberpsychologist and senior adviser for digital literacy and online safety at the Alannah and Madeline Foundation, said the code will require online services to collect only the personal information they genuinely* need. This idea is called data minimisation.* It will also strengthen the rules about getting young people’s permission, or consent, before collecting and using their personal information.

“Protecting your privacy is important and you can take practical steps to protect it by checking app permissions, using strong passwords, reviewing your privacy settings and thinking carefully about what information you choose to share online. It’s also important to understand how your personal information may be collected, used and shared so that you can make informed choices about privacy,” Dr Popovac said.

Dr Karley Beckman, who is a senior lecturer in digital technologies for learning at the University of Wollongong, said the information online services collect can be used in different ways, such as showing people targeted* advertisements or helping companies improve existing products or create new ones. While this can be good, at times it can also be bad.

“It may keep them on their computers longer or encourage them to make purchases,” she said.

Dr Beckman said children have a right to privacy and should be able to choose whether they share their personal information. That’s why the new code is an important step forward.

“Children have not been adequately* protected under the previous legislation*, in that their personal information could be collected, shared, stored and used by online services for a range of reasons – just as adults’ data can,” Dr Beckman said. “As adults, we can provide consent to some extent, but children’s data is highly valuable. They can be profiled* and targeted at a point in their development when their identity is still forming. There are millions of data points collected about a child by the time they are 18.”

When the code comes into effect, there will be some changes with how you access new apps, platforms and online services and you may be asked to verify your age to make sure your personal information is kept private.

Some apps may also ask for a parent’s permission before collecting or using a child’s personal information. Dr Beckman said that’s nothing to worry about.

“These steps are put in place to protect you, not to get you into trouble or surveil* you,” she said.

The draft code also says companies should not keep children’s personal information forever. Once they no longer need it to provide their service, they should safely delete it or remove the details that could identify the child.

One important point is that the code does not mean companies must immediately delete information whenever a child asks. In some cases, businesses may need to keep certain records because other laws require them to do so.

The code also encourages companies to explain their privacy rules in clear, child-friendly language, so it’s easier for young people to understand what will happen to their personal information before they agree to use a service.

But while the code helps protect your information, it’s still important to be careful when you’re online. Always talk to a trusted adult if something doesn’t feel right.

To learn more about the code, visit the Privacy for Kids hub: Privacy for Kids at oaic.gov.au/privacy/privacy-for-kids

POLL

GLOSSARY

genuinely: to do or say something in a sincere and honest way

minimisation: to reduce something to the lowest possible level, amount or size

targeted: directed, focused, or aimed at a particular person, group, thing or objective

adequately: in a way that is enough, sufficient or satisfactory for a particular purpose or need

legislation: a law or set of laws enacted by a government or legislative body, or the actual process of making those laws

profiled: to analyse data, behaviour or traits to predict the likely actions or description of a person

surveil: to watch a place or person, or listen to private conversations, closely over a period of time

EXTRA READING

Part 6: Influencers and advertising

Part 7: Gaming chats and group DMs

Part 8: Being scam savvy

QUICK QUIZ

What is the aim of the new Children’s Online Privacy Code?

What kind of information will be protected under the Code?

What steps can you already take to make sure your privacy is protected?

What are two changes you may notice when using apps once the new Code is introduced?

Under the new Code, how long can companies keep a child’s information for?

LISTEN TO THIS STORY

CLASSROOM ACTIVITIES

Please refer to the accompanying Digital Literacy classroom workbook with 24 teacher-produced, curriculum aligned activities. It’s FREE for teachers who have signed up to receive the free weekly Kids News edm.