Unlike many sectors, the games Children’s Code addresses specific industry is experienced in managing issues relating to a limited age group age verification processes, but as but it sits in the context of broader the Children’s Code encourages EU and UK attempts to address verification of the ages of younger online safety (covered elsewhere users, operators may find that their in this guide). new or revised processes around age verification can lead to Cookies and similar further privacy risks. technologies The need to treat all users as if Almost all publishers and games will they were children by default is use cookies of some kind to support likely to lead to some services a wide range of services and restricting access which will functions. The use of cookies is impede the freedom of assembly governed by EU law (which is mirrored and communication of children in in the UK) and a cookie policy is unanticipated ways. We’re already required to set out what cookies seeing growth in the use of data are used and what they’re used for. verification techniques, often AI Prior consent (to GDPR standard) powered, many of which require the is needed from players to the use collection of additional personal of cookies if they’re being used for data to determine a user’s age in any purpose other than one which a way that runs counter to data is ‘strictly necessary’ for a service minimisation goals. This inevitably requested by a player. leads to larger and more detailed volumes of information being Industry practice in the UK and some processed which are at risk from other markets is to use a prominent a cyber attack. pop-up or banner to achieve this. It’s important to view the Children’s Regulators across the UK and Code as merely one element of the Europe are paying an increasing current trend to protect consumers amount of attention to cookie of all ages from online harm. The compliance and can impose significant sanctions for breach. 100