|
Describe source of risk and nature of potential impact on individuals.
Include as a minimum an assessment of particular risks to children as listed in the DPIA standard in the Age appropriate design code. You may need to consider separately for different age groups.
|
Likelihood of harm
Remote, possible or probable
|
Severity of harm
Minimal, significant or severe
|
Overall risk
Low, medium or high
|
- Profiling that infers children's personal information is done without adequate transparency or safeguards, or is not in the best interests of the child risking children’s right to development and preservation of identity.
|
possible |
significant |
medium |
- Personalised targeting of service features that generate revenue (targeted ads or the availability of apps to download from the app store) that are set to on-by-default, or without adequate transparency and safeguards that risks children’s right to protection from economic exploitation.
|
possible |
severe |
high |
- Use of (game-play) data that contravenes health standards and guidelines (eg issues by the Chief Medical Officer or Public Health England). Risk that data-enabled service personalisation leads to excessive engagement that impacts on the child’s right to health.
|
possible |
significant |
medium |
- Personalised content that exposes children to content that is damaging to health (for example age-inappropriate products, suicide and self-harm content or inaccurate health information) that risks children’s right to life, survival and development.
|
possible |
severe |
high |
- On-by-default data sharing with other service users exposes children to risks of violence or abuse (for example through stalking or harrasment).
|
possible |
severe |
high |
- Data relating to identity is shared with other service users through on-by-default settings, or without adequate transparency and safeguards, risking children’s right to development and preservation of identity.
|
remote |
significant |
medium |
- Lack of age assurance measures on services that allow children to access or create unlawful sexual content, and risks children’s right to protection from sexual exploitation.
|
remote |
severe |
medium |
- Connected devices gathering data within private spaces (eg a child's home), without adequate transparency or safeguards (eg passive listening), risking children’s right to protection of privacy.
|
possible |
severe |
high |