Weekly Guidance Watch — 1 September 2026
Each week we surface a few resources that may help you do the work — authoritative guidance, tools, frameworks and the definitive reports — including the excellent-but-hard-to-find material you would otherwise only meet by accident. This is deliberately not another feed of legislation news or fines; it is about what a privacy specialist would benefit from knowing about, and we hope you find it useful.
This week’s pick: who tells you how to design for children?
A themed issue this week: four regulator frameworks for children’s data, held together by the thread they share — privacy by design, with the child’s best interests as the objective the design must serve. The ICO’s fifteen standards, the Irish DPC’s fourteen Fundamentals, the CNIL’s eight recommendations, and the binding code Australia’s OAIC must register by 10 December 2026 — plus a development that is easy to miss: the EDPB is currently working on guidelines on the processing of children’s data. Four resources, one summary page.
1 · Designing for Children’s Data: Four Regulator Frameworks That Converge
ICO (UK) · DPC (Ireland) · CNIL (France) · OAIC (Australia) · themed issue — four resources, new this week
How should a service children use be designed? Four regulators have answered in detail, and their answers converge. The ICO’s Children’s Code sets fifteen standards for services likely to be accessed by children — and is still moving, with a strategy progress update published in August 2026. The Irish DPC’s Fundamentals take the interpretative route: fourteen principles, from “floor of protection” to “bake it in”, applying online and offline. The CNIL’s eight recommendations hold protection and autonomy together, with profiling off by default. And the OAIC is writing a binding code in the same mould — the first outside Europe that we are aware of — registration due by 10 December 2026, looking, in its own words, to the UK and Irish frameworks as it drafts. The thread through all four is Article 25: privacy by design with the child’s best interests as the design objective. One more worth knowing: the EDPB is currently working on guidelines on the processing of children’s data.
Browse all back issues → Subscribe by RSS
The RSS feed carries every resource as we surface it. It sets no cookies and collects nothing about you — your reader fetches the file, and we never know who you are.