Looking for needles in a haystack: Key issues affecting children's rights in the General Data Protection Regulation. Issue 2 (April 2018)

• Record Type: Journal Article
• Authors: Lievens, Eva; Verdoodt, Valerie
• Is Part Of: Computer law & security review. Volume 34:Issue 2(2018)
• Page Start: 269
• Page End: 278
• Publication Date: 2018-04
• Subjects: Data protection -- Privacy -- Child -- Children's rights -- General Data Protection Regulation; Computers -- Law and legislation -- Periodicals; Computer security -- Law and legislation -- Periodicals; Electronic commerce -- Law and legislation -- Periodicals; Data protection -- Law and legislation -- Periodicals; Computer security -- Law and legislation; Computers -- Law and legislation; Data protection -- Law and legislation; Electronic commerce -- Law and legislation; Periodicals; 343.0999
• DOI: 10.1016/j.clsr.2017.09.007
• Languages: English
• ISSNs: 2212-473X

Abstract

Abstract: The EU General Data Protection Regulation (GDPR) devotes particular attention to the protection of personal data of children. The rationale is that children are less aware of the risks and the potential consequences of the processing of their personal data on their rights. Yet, the text of the GDPR offers little clarity as to the actual implementation and impact of a number of provisions that may significantly affect children and their rights, leading to legal uncertainty for data controllers, parents and children. This uncertainty relates for instance to the age of consent for processing children's data in relation to information society services, the technical requirements regarding parental consent in that regard, the interpretation of the extent to which profiling of children is allowed and the level of transparency that is required vis-à-vis children. This article aims to identify a number of key issues and questions – both theoretical and practical – that raise concerns from a multi-dimensional children's rights perspective, and to clarify remaining ambiguities in the run-up to the actual application of the GDPR from 25 May 2018 onwards.