Children'S Data

Children's data refers to personal information collected from or about minors, typically defined as individuals under 13 or 16 depending on jurisdiction. Enterprises handling such data face heightened compliance obligations under regulations like COPPA in the US and GDPR in Europe, which impose strict consent requirements, limit data usage, and mandate enhanced privacy protections. Proper governance of children's data is critical because minors cannot provide informed consent and are vulnerable to exploitation, making this category one of the most heavily regulated and ethically scrutinized areas of data handling in AI systems.

1 item

Corporate PolicyUS2026-09-11

Meta's Invasive Prompt Incident Exposes Runtime Data Minimization Gap

Meta's AI assistant generated suggested prompts that identified children in a user's video and aggregated personal information from historical posts and family members' accounts. Meta acknowledged the problem, calling it a failure to 'hit the mark,' and applied fixes to prevent the system from suggesting prompts on personal topics. The incident illustrates a structural gap between data minimization policies and what AI systems actually do with available contextual data at runtime.

Meta privacy data minimization consumer AI AI incident children's data purpose limitation