Australia Is Tightening the Rules on Children’s Privacy – Here’s How It Will Work

Why It Matters

The code forces tech platforms to curb indiscriminate data harvesting from minors, reshaping the Australian digital market and setting a benchmark for child‑centric privacy worldwide.

Key Takeaways

• OAIC released draft Children’s Online Privacy Code for comment.
• Code covers all digital services handling children’s data.
• Requires explicit, age‑appropriate consent and data minimisation.
• Grants children right to request deletion of their data.
• Enforces transparent geolocation tracking and bans deceptive design.

Pulse Analysis

Australia’s privacy landscape has long lagged behind the rapid growth of digital services used by children. The 2024 amendment act empowers the Office of the Australian Information Commissioner to craft a Children’s Online Privacy Code that reflects modern data practices. By inviting public feedback, the OAIC signals a collaborative approach, aiming to balance innovation with the protection of minors whose digital footprints now total millions of data points before they turn thirteen.

The draft code introduces several enforceable standards that will reshape how platforms operate. Data minimisation requires any collection to serve a clear purpose, with retention limited to necessity, while explicit, age‑appropriate consent replaces the opaque terms that have traditionally governed app usage. A statutory right to delete—often dubbed the "right to be forgotten"—gives children direct control over their personal information. Geolocation transparency ensures that location tracking is disclosed to the child, and deceptive design tactics aimed at coaxing data sharing are prohibited. These provisions collectively challenge the "grab and keep" model that fuels big‑tech advertising and AI training pipelines.

Beyond regulatory compliance, the code underscores a broader societal shift toward digital literacy. Parents and caregivers will need to understand consent mechanisms, and vulnerable children without supportive adults may require additional safeguards. With a consultation deadline of early June and a final rollout slated for late 2026, Australian businesses have a narrow window to adapt. Successful implementation could position Australia as a leader in child‑focused data protection, influencing global policy discussions and encouraging other jurisdictions to adopt similarly rigorous standards.