{"text_format":"1","workbook":"xlsx","n_sheets":19,"sheets":["Introduction","Dashboard","Master sheet","Tables & graphs","Lookup","1. Accountability","2. Transparency","3. Children's rights ","4. DPIAs","5. Data minimisation","6. Data sharing","7. Age assurance","8. Detrimental use of info","9. Default privacy settings","10. Parental controls","11. Geolocation data","12. Profiling","13. Nudge techniques","14. Connected toys & devices"],"not_rendered":{"charts":12,"images":1,"macros":1,"external_links":0,"defined_names":18,"comments":0,"pivot_tables":0},"unopened":[],"bounds":{"document_bytes":16777216,"sheet_cells":100000,"rows_first":2000,"rows_last":500,"rows_between":2000,"halvings":0,"cell_chars":16384,"cell_head_chars":4096},"cells_cut":0,"cells_raw":0,"read":"whole","date_system":"1900"}

{"sheet":"Introduction","index":0,"n_rows":6,"n_cols":2,"rows_kept":6,"cut":false,"hidden":false,"merged":[[5,1,42,15],[4,1,4,15]]}
[]
[]
[]
[]
[null,"Age Appropriate Design Toolkit Tracker"]
[null,"\nYou can use this Tracker to record and track your actions once you have read the toolkit. \n\nThe first tab is called ‘Dashboard’. The dashboard will update automatically when you fill in the spreadsheet.\n\nThe next tab is called ‘Master Sheet’. This shows the toolkit and records all your responses in one place.\n\nWe have suggested some columns to help you to build your own action plan and improve your compliance. However, as the spreadsheet contains formula we would not recommend altering any of the existing columns. If you do make changes, you may impact the dashboard, master sheet or general functionality. Please note that we cannot offer support for maintaining the spreadsheet.\n\nKey phrases:\n\nCurrent status – This refers to whether you are ‘fully meeting our expectation’, ‘partially meeting our expectation’, or ‘not meeting our expectation’. You can also record the status as ‘not applicable’ to your organisation. You can choose the status from a drop-down list.\n\nReasons for status – You can record the reasons why you have chosen the ‘Current status’ for this expectation.\n\nActions – You can describe what you need to do next to meet the expectation.\n\nAction Owner(s) – You can specify who is responsible for the action.\n\nAction Status – You can choose what stage the action is at from a drop-down list. \n\nDue Date – You can record when you expect to complete the action.\n\n\n\nThe Data Protection Audit Framework, including the Tracker, is available under the terms of the Open Government Licence v3.0."]

{"sheet":"Dashboard","index":1,"n_rows":0,"n_cols":0,"rows_kept":0,"cut":false,"hidden":false,"merged":[]}

{"sheet":"Master sheet","index":2,"n_rows":206,"n_cols":16,"rows_kept":206,"cut":false,"hidden":false,"merged":[[137,1,139,1],[137,2,139,2],[140,1,145,1],[140,2,145,2],[75,1,81,1],[75,2,81,2],[126,1,131,1],[126,2,131,2],[132,1,136,1],[132,2,136,2],[94,2,96,2],[97,1,100,1],[97,2,100,2],[101,1,103,1],[113,2,115,2],[94,1,96,1],[175,1,178,1],[175,2,178,2],[162,0,178,0],[179,1,182,1],[179,2,182,2],[162,1,164,1],[162,2,164,2],[165,1,169,1],[165,2,169,2],[170,1,174,1],[170,2,174,2],[200,1,205,1],[200,2,205,2],[194,0,205,0],[183,1,186,1],[183,2,186,2],[187,1,193,1],[187,2,193,2],[179,0,193,0],[194,1,199,1],[194,2,199,2],[24,1,26,1],[24,2,26,2],[27,1,32,1],[27,2,32,2],[2,0,32,0],[12,1,14,1],[12,2,14,2],[15,1,18,1],[15,2,18,2],[19,1,23,1],[19,2,23,2],[0,0,0,3],[2,1,5,1],[2,2,5,2],[6,1,11,1],[6,2,11,2],[154,0,161,0],[146,1,150,1],[146,2,150,2],[151,1,153,1],[151,2,153,2],[146,0,153,0],[154,1,155,1],[154,2,155,2],[156,1,161,1],[156,2,161,2],[62,1,68,1],[62,2,68,2],[69,1,74,1],[69,2,74,2],[62,0,74,0],[33,0,40,0],[41,1,45,1],[41,2,45,2],[41,0,45,0],[46,0,61,0],[46,1,48,1],[46,2,48,2],[49,1,56,1],[49,2,56,2],[57,1,61,1],[57,2,61,2],[33,1,40,1],[33,2,40,2],[119,0,136,0],[101,2,103,2],[137,0,145,0],[75,0,81,0],[82,1,93,1],[82,2,93,2],[116,1,118,1],[116,2,118,2],[82,0,118,0],[119,1,125,1],[119,2,125,2],[104,1,108,1],[104,2,108,2],[109,1,112,1],[109,2,112,2],[113,1,115,1]]}
["AADC Tracker\nMaster Sheet"]
["Category","Number","Our expectations","Reference","Ways to meet our expectations ","Current Status","Reasons for Status","Action(s)","Action owner","Action Status","Completion date\n(DD/MM/YYYY)",{"$f":"IF(ISBLANK('1. Accountability'!K1),\"\",'1. Accountability'!K1)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!L1),\"\",'1. Accountability'!L1)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!M1),\"\",'1. Accountability'!M1)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!N1),\"\",'1. Accountability'!N1)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!O1),\"\",'1. Accountability'!O1)","v":""}]
["Accountability",1.1000000000000001,"There is an assessment whether children are likely to access the online service, and an appropriate evidence-based decision taken on whether to apply the code standards.","1.1.1","Assess whether a significant number of UK children under 18 years of age are likely to access all, or parts, of your online service. Consider whether:\n- \tthe online service is intended for use by children;\n- \tthe online service is adult-only, but accessed by a significant number of children;\n- \tthere is evidence that children are, or are not, a substantive and identifiable user group (lack of evidence that children are using the online service is not sufficient to support that a service is not accessed by children);\n- \tchildren can access the online service due to weak age assurance measures;\n- \tthere has been customer contact, support requests, or complaints from children or parents;\n- \tthe online service includes adverts that are targeted at children that might evidence a high number of click-throughs or interest from people on child-focused advertising;\n- \tthere is child-focused content on the online service (eg cartoons, animation, music or audio content, incentives for children’s participation, digital functionalities such as gamification, presence of children, influencers or celebrities popular with children); and\n- \tchildren are known to like and access similar online services or content.",{"$f":"IF(ISBLANK('1. Accountability'!E2),\"\",'1. Accountability'!E2)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!F2),\"\",'1. Accountability'!F2)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!G2),\"\",'1. Accountability'!G2)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!H2),\"\",'1. Accountability'!H2)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!I2),\"\",'1. Accountability'!I2)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!J2),\"\",'1. Accountability'!J2)","v":""}]
[{"$f":"A3","v":"Accountability"},{"$f":"B3","v":1.1000000000000001},{"$f":"C3","v":"There is an assessment whether children are likely to access the online service, and an appropriate evidence-based decision taken on whether to apply the code standards."},"1.1.2","Complete the assessment before processing the information and document the outcome as part of a data protection impact assessment (DPIA). Include a clear decision and justification on whether children are likely to access all or parts of your online service. ",{"$f":"IF(ISBLANK('1. Accountability'!E3),\"\",'1. Accountability'!E3)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!F3),\"\",'1. Accountability'!F3)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!G3),\"\",'1. Accountability'!G3)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!H3),\"\",'1. Accountability'!H3)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!I3),\"\",'1. Accountability'!I3)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!J3),\"\",'1. Accountability'!J3)","v":""}]
["Accountability",1.1000000000000001,"There is an assessment whether children are likely to access the online service, and an appropriate evidence-based decision taken on whether to apply the code standards.","1.1.3","Review the assessment regularly so it remains accurate, particularly before implementing changes to your online service.",{"$f":"IF(ISBLANK('1. Accountability'!E4),\"\",'1. Accountability'!E4)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!F4),\"\",'1. Accountability'!F4)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!G4),\"\",'1. Accountability'!G4)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!H4),\"\",'1. Accountability'!H4)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!I4),\"\",'1. Accountability'!I4)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!J4),\"\",'1. Accountability'!J4)","v":""}]
["Accountability",1.1000000000000001,"There is an assessment whether children are likely to access the online service, and an appropriate evidence-based decision taken on whether to apply the code standards.","1.1.4","Implement effective measures to prevent access to children if the service is adult-only. Seek sufficient evidence to support that children cannot access it and are not using the online service as a result.",{"$f":"IF(ISBLANK('1. Accountability'!E5),\"\",'1. Accountability'!E5)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!F5),\"\",'1. Accountability'!F5)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!G5),\"\",'1. Accountability'!G5)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!H5),\"\",'1. Accountability'!H5)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!I5),\"\",'1. Accountability'!I5)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!J5),\"\",'1. Accountability'!J5)","v":""}]
["Accountability",1.2000000000000002,"There is an embedded privacy management framework endorsed by management that supports the development and provision of online services aimed at, or likely to be accessed by, children.","1.2.1","Implement an overall governance and privacy management strategy or framework that includes appropriate technical and organisational measures designed to effectively implement the data protection principles.",{"$f":"IF(ISBLANK('1. Accountability'!E6),\"\",'1. Accountability'!E6)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!F6),\"\",'1. Accountability'!F6)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!G6),\"\",'1. Accountability'!G6)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!H6),\"\",'1. Accountability'!H6)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!I6),\"\",'1. Accountability'!I6)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!J6),\"\",'1. Accountability'!J6)","v":""}]
["Accountability",{"$f":"B7","v":1.2000000000000002},{"$f":"C7","v":"There is an embedded privacy management framework endorsed by management that supports the development and provision of online services aimed at, or likely to be accessed by, children."},"1.2.2","Have data protection policies and procedures in place that you update and review regularly and communicate to all staff.",{"$f":"IF(ISBLANK('1. Accountability'!E7),\"\",'1. Accountability'!E7)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!F7),\"\",'1. Accountability'!F7)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!G7),\"\",'1. Accountability'!G7)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!H7),\"\",'1. Accountability'!H7)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!I7),\"\",'1. Accountability'!I7)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!J7),\"\",'1. Accountability'!J7)","v":""}]
["Accountability",1.2000000000000002,"There is an embedded privacy management framework endorsed by management that supports the development and provision of online services aimed at, or likely to be accessed by, children.","1.2.3","Make senior management accountable for understanding and addressing the risks associated with developing and providing online services aimed at or likely to be accessed by children.",{"$f":"IF(ISBLANK('1. Accountability'!E8),\"\",'1. Accountability'!E8)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!F8),\"\",'1. Accountability'!F8)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!G8),\"\",'1. Accountability'!G8)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!H8),\"\",'1. Accountability'!H8)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!I8),\"\",'1. Accountability'!I8)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!J8),\"\",'1. Accountability'!J8)","v":""}]
["Accountability",1.2000000000000002,"There is an embedded privacy management framework endorsed by management that supports the development and provision of online services aimed at, or likely to be accessed by, children.","1.2.4","Appoint a Data Protection Officer (DPO) or a nominated DP lead with oversight of your online services aimed at, or likely to be accessed by, children.",{"$f":"IF(ISBLANK('1. Accountability'!E9),\"\",'1. Accountability'!E9)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!F9),\"\",'1. Accountability'!F9)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!G9),\"\",'1. Accountability'!G9)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!H9),\"\",'1. Accountability'!H9)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!I9),\"\",'1. Accountability'!I9)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!J9),\"\",'1. Accountability'!J9)","v":""}]
["Accountability",1.2000000000000002,"There is an embedded privacy management framework endorsed by management that supports the development and provision of online services aimed at, or likely to be accessed by, children.","1.2.5","Assign responsibility in job descriptions to ensure your services comply with data protection law.",{"$f":"IF(ISBLANK('1. Accountability'!E10),\"\",'1. Accountability'!E10)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!F10),\"\",'1. Accountability'!F10)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!G10),\"\",'1. Accountability'!G10)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!H10),\"\",'1. Accountability'!H10)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!I10),\"\",'1. Accountability'!I10)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!J10),\"\",'1. Accountability'!J10)","v":""}]
["Accountability",1.2000000000000002,"There is an embedded privacy management framework endorsed by management that supports the development and provision of online services aimed at, or likely to be accessed by, children.","1.2.6","Promote a positive data protection culture across your organisation.",{"$f":"IF(ISBLANK('1. Accountability'!E11),\"\",'1. Accountability'!E11)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!F11),\"\",'1. Accountability'!F11)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!G11),\"\",'1. Accountability'!G11)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!H11),\"\",'1. Accountability'!H11)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!I11),\"\",'1. Accountability'!I11)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!J11),\"\",'1. Accountability'!J11)","v":""}]
["Accountability",1.3000000000000003,"Online service developers are appropriately skilled and qualified and have completed data protection training covering children's privacy before starting active development.","1.3.1","Set out the minimum skills and experiences or qualifications required for the role of service developer in recruitment adverts and job descriptions.",{"$f":"IF(ISBLANK('1. Accountability'!E12),\"\",'1. Accountability'!E12)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!F12),\"\",'1. Accountability'!F12)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!G12),\"\",'1. Accountability'!G12)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!H12),\"\",'1. Accountability'!H12)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!I12),\"\",'1. Accountability'!I12)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!J12),\"\",'1. Accountability'!J12)","v":""}]
["Accountability",{"$f":"B13","v":1.3000000000000003},{"$f":"C13","v":"Online service developers are appropriately skilled and qualified and have completed data protection training covering children's privacy before starting active development."},"1.3.2","Complete a training needs analysis for online service developers in privacy considerations and data protection law.",{"$f":"IF(ISBLANK('1. Accountability'!E13),\"\",'1. Accountability'!E13)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!F13),\"\",'1. Accountability'!F13)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!G13),\"\",'1. Accountability'!G13)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!H13),\"\",'1. Accountability'!H13)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!I13),\"\",'1. Accountability'!I13)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!J13),\"\",'1. Accountability'!J13)","v":""}]
["Accountability",1.3000000000000003,"Online service developers are appropriately skilled and qualified and have completed data protection training covering children's privacy before starting active development.","1.3.3","Deliver regular up-to-date and appropriate specialised data protection training to key roles.",{"$f":"IF(ISBLANK('1. Accountability'!E14),\"\",'1. Accountability'!E14)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!F14),\"\",'1. Accountability'!F14)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!G14),\"\",'1. Accountability'!G14)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!H14),\"\",'1. Accountability'!H14)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!I14),\"\",'1. Accountability'!I14)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!J14),\"\",'1. Accountability'!J14)","v":""}]
["Accountability",1.4000000000000004,"There is an effective risk management strategy in place to capture all the privacy risks during the development and provision of online services aimed at, or likely to be accessed by, children. Risks are tracked at a corporate or management level through an appropriate risk register.","1.4.1","Implement an overarching risk management strategy for your online services.",{"$f":"IF(ISBLANK('1. Accountability'!E15),\"\",'1. Accountability'!E15)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!F15),\"\",'1. Accountability'!F15)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!G15),\"\",'1. Accountability'!G15)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!H15),\"\",'1. Accountability'!H15)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!I15),\"\",'1. Accountability'!I15)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!J15),\"\",'1. Accountability'!J15)","v":""}]
["Accountability",{"$f":"B16","v":1.4000000000000004},{"$f":"C16","v":"There is an effective risk management strategy in place to capture all the privacy risks during the development and provision of online services aimed at, or likely to be accessed by, children. Risks are tracked at a corporate or management level through an appropriate risk register."},"1.4.2","Complete an assessment of the level of risk and risk appetite that depends on the extent of the use of your online services. ",{"$f":"IF(ISBLANK('1. Accountability'!E16),\"\",'1. Accountability'!E16)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!F16),\"\",'1. Accountability'!F16)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!G16),\"\",'1. Accountability'!G16)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!H16),\"\",'1. Accountability'!H16)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!I16),\"\",'1. Accountability'!I16)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!J16),\"\",'1. Accountability'!J16)","v":""}]
["Accountability",1.4000000000000004,"There is an effective risk management strategy in place to capture all the privacy risks during the development and provision of online services aimed at, or likely to be accessed by, children. Risks are tracked at a corporate or management level through an appropriate risk register.","1.4.3","Document and track risks on a risk register.",{"$f":"IF(ISBLANK('1. Accountability'!E17),\"\",'1. Accountability'!E17)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!F17),\"\",'1. Accountability'!F17)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!G17),\"\",'1. Accountability'!G17)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!H17),\"\",'1. Accountability'!H17)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!I17),\"\",'1. Accountability'!I17)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!J17),\"\",'1. Accountability'!J17)","v":""}]
["Accountability",1.4000000000000004,"There is an effective risk management strategy in place to capture all the privacy risks during the development and provision of online services aimed at, or likely to be accessed by, children. Risks are tracked at a corporate or management level through an appropriate risk register.","1.4.4","Update management in a timely manner on current risks, their status and any mitigating actions planned.",{"$f":"IF(ISBLANK('1. Accountability'!E18),\"\",'1. Accountability'!E18)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!F18),\"\",'1. Accountability'!F18)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!G18),\"\",'1. Accountability'!G18)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!H18),\"\",'1. Accountability'!H18)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!I18),\"\",'1. Accountability'!I18)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!J18),\"\",'1. Accountability'!J18)","v":""}]
["Accountability",1.5000000000000004,"There are reports against the standards in the code included in any internal or external accountability reports, and there is a programme of compliance audits and KPIs (key performance indicators) to monitor compliance with code standards.","1.5.1","Implement KPIs in areas such as:\n\n- \tnumber of underage and overage users detected and removed from services;\n- \taccess and use of privacy information (click throughs, expansion of layered information, level of engagement with settings);  \n- \tchanges to engagement rates (eg positive nudges and suggestions to save progress or pauses in engagement); \n- \tlevel of complaints and concerns about terms and conditions or content recommendations;\n- \tnumber of information access or erasure requests received; and\n- \tnumber and nature of revisions to service design.",{"$f":"IF(ISBLANK('1. Accountability'!E19),\"\",'1. Accountability'!E19)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!F19),\"\",'1. Accountability'!F19)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!G19),\"\",'1. Accountability'!G19)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!H19),\"\",'1. Accountability'!H19)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!I19),\"\",'1. Accountability'!I19)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!J19),\"\",'1. Accountability'!J19)","v":""}]
["Accountability",{"$f":"B20","v":1.5000000000000004},{"$f":"C20","v":"There are reports against the standards in the code included in any internal or external accountability reports, and there is a programme of compliance audits and KPIs (key performance indicators) to monitor compliance with code standards."},"1.5.2","Include commentary on children's privacy and performance to KPIs in your internal and external accountability reports.",{"$f":"IF(ISBLANK('1. Accountability'!E20),\"\",'1. Accountability'!E20)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!F20),\"\",'1. Accountability'!F20)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!G20),\"\",'1. Accountability'!G20)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!H20),\"\",'1. Accountability'!H20)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!I20),\"\",'1. Accountability'!I20)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!J20),\"\",'1. Accountability'!J20)","v":""}]
["Accountability",1.5000000000000004,"There are reports against the standards in the code included in any internal or external accountability reports, and there is a programme of compliance audits and KPIs (key performance indicators) to monitor compliance with code standards.","1.5.3","Report and review KPIs regularly in appropriate meetings.",{"$f":"IF(ISBLANK('1. Accountability'!E21),\"\",'1. Accountability'!E21)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!F21),\"\",'1. Accountability'!F21)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!G21),\"\",'1. Accountability'!G21)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!H21),\"\",'1. Accountability'!H21)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!I21),\"\",'1. Accountability'!I21)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!J21),\"\",'1. Accountability'!J21)","v":""}]
["Accountability",1.5000000000000004,"There are reports against the standards in the code included in any internal or external accountability reports, and there is a programme of compliance audits and KPIs (key performance indicators) to monitor compliance with code standards.","1.5.4","Implement a programme of internal and external audit to monitor compliance to the standards in the code.",{"$f":"IF(ISBLANK('1. Accountability'!E22),\"\",'1. Accountability'!E22)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!F22),\"\",'1. Accountability'!F22)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!G22),\"\",'1. Accountability'!G22)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!H22),\"\",'1. Accountability'!H22)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!I22),\"\",'1. Accountability'!I22)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!J22),\"\",'1. Accountability'!J22)","v":""}]
["Accountability",1.5000000000000004,"There are reports against the standards in the code included in any internal or external accountability reports, and there is a programme of compliance audits and KPIs (key performance indicators) to monitor compliance with code standards.","1.5.5","Feed audit reports and outcomes back to management and track issues or risks on an appropriate risk register.",{"$f":"IF(ISBLANK('1. Accountability'!E23),\"\",'1. Accountability'!E23)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!F23),\"\",'1. Accountability'!F23)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!G23),\"\",'1. Accountability'!G23)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!H23),\"\",'1. Accountability'!H23)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!I23),\"\",'1. Accountability'!I23)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!J23),\"\",'1. Accountability'!J23)","v":""}]
["Accountability",1.6,"There is an internal record of all processing activities (ROPA) in place.","1.6.1","Complete a data flow mapping exercise to document the information that flows in, around and out of your online system or service.",{"$f":"IF(ISBLANK('1. Accountability'!E24),\"\",'1. Accountability'!E24)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!F24),\"\",'1. Accountability'!F24)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!G24),\"\",'1. Accountability'!G24)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!H24),\"\",'1. Accountability'!H24)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!I24),\"\",'1. Accountability'!I24)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!J24),\"\",'1. Accountability'!J24)","v":""}]
["Accountability",{"$f":"B25","v":1.6},{"$f":"C25","v":"There is an internal record of all processing activities (ROPA) in place."},"1.6.2","Ensure the information documented within your ROPA is in line with the requirements set out in article 30 of the UK GDPR.",{"$f":"IF(ISBLANK('1. Accountability'!E25),\"\",'1. Accountability'!E25)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!F25),\"\",'1. Accountability'!F25)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!G25),\"\",'1. Accountability'!G25)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!H25),\"\",'1. Accountability'!H25)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!I25),\"\",'1. Accountability'!I25)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!J25),\"\",'1. Accountability'!J25)","v":""}]
["Accountability",1.6,"There is an internal record of all processing activities (ROPA) in place.","1.6.3","Review the ROPA on a regular basis to maintain accuracy with current processing activities, policies and procedures.",{"$f":"IF(ISBLANK('1. Accountability'!E26),\"\",'1. Accountability'!E26)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!F26),\"\",'1. Accountability'!F26)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!G26),\"\",'1. Accountability'!G26)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!H26),\"\",'1. Accountability'!H26)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!I26),\"\",'1. Accountability'!I26)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!J26),\"\",'1. Accountability'!J26)","v":""}]
["Accountability",1.7,"There are published rules which govern the behaviour of people who use the service and the conditions for use; and adherence to these rules is monitored. ","1.7.1","Provide people with appropriate terms and conditions or rules before using your online service.",{"$f":"IF(ISBLANK('1. Accountability'!E27),\"\",'1. Accountability'!E27)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!F27),\"\",'1. Accountability'!F27)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!G27),\"\",'1. Accountability'!G27)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!H27),\"\",'1. Accountability'!H27)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!I27),\"\",'1. Accountability'!I27)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!J27),\"\",'1. Accountability'!J27)","v":""}]
["Accountability",{"$f":"B28","v":1.7},{"$f":"C28","v":"There are published rules which govern the behaviour of people who use the service and the conditions for use; and adherence to these rules is monitored. "},"1.7.2","Write terms and conditions or rules in clear language that is appropriate for the age of the intended user and implement different policies depending on the age of the users.",{"$f":"IF(ISBLANK('1. Accountability'!E28),\"\",'1. Accountability'!E28)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!F28),\"\",'1. Accountability'!F28)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!G28),\"\",'1. Accountability'!G28)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!H28),\"\",'1. Accountability'!H28)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!I28),\"\",'1. Accountability'!I28)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!J28),\"\",'1. Accountability'!J28)","v":""}]
["Accountability",1.7,"There are published rules which govern the behaviour of people who use the service and the conditions for use; and adherence to these rules is monitored. ","1.7.3","Have checks in place to provide assurances that people uphold and adhere to the rules.",{"$f":"IF(ISBLANK('1. Accountability'!E29),\"\",'1. Accountability'!E29)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!F29),\"\",'1. Accountability'!F29)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!G29),\"\",'1. Accountability'!G29)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!H29),\"\",'1. Accountability'!H29)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!I29),\"\",'1. Accountability'!I29)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!J29),\"\",'1. Accountability'!J29)","v":""}]
["Accountability",1.7,"There are published rules which govern the behaviour of people who use the service and the conditions for use; and adherence to these rules is monitored. ","1.7.4","Communicate how compliance to the rules or terms and conditions is monitored.",{"$f":"IF(ISBLANK('1. Accountability'!E30),\"\",'1. Accountability'!E30)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!F30),\"\",'1. Accountability'!F30)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!G30),\"\",'1. Accountability'!G30)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!H30),\"\",'1. Accountability'!H30)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!I30),\"\",'1. Accountability'!I30)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!J30),\"\",'1. Accountability'!J30)","v":""}]
["Accountability",1.7,"There are published rules which govern the behaviour of people who use the service and the conditions for use; and adherence to these rules is monitored. ","1.7.5","Introduce systems so that you meet any commitments to people about the content or other aspects of the online service eg anti-bullying).",{"$f":"IF(ISBLANK('1. Accountability'!E31),\"\",'1. Accountability'!E31)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!F31),\"\",'1. Accountability'!F31)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!G31),\"\",'1. Accountability'!G31)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!H31),\"\",'1. Accountability'!H31)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!I31),\"\",'1. Accountability'!I31)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!J31),\"\",'1. Accountability'!J31)","v":""}]
["Accountability",1.7,"There are published rules which govern the behaviour of people who use the service and the conditions for use; and adherence to these rules is monitored. ","1.7.6","Include details of the action you take if rules are breached or not adhered to.",{"$f":"IF(ISBLANK('1. Accountability'!E32),\"\",'1. Accountability'!E32)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!F32),\"\",'1. Accountability'!F32)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!G32),\"\",'1. Accountability'!G32)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!H32),\"\",'1. Accountability'!H32)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!I32),\"\",'1. Accountability'!I32)","v":""},{"$f":"IF(ISBLANK('1. Accountability'!J32),\"\",'1. Accountability'!J32)","v":""}]
["Transparency",2.1,"Children (and parents or guardians, where appropriate) are proactively provided with privacy information at the time their personal information is collected from them or obtained.","2.1.1","Provide privacy information to children when you collect their information directly through your online service.",{"$f":"IF(ISBLANK('2. Transparency'!E2),\"\",'2. Transparency'!E2)","v":""},{"$f":"IF(ISBLANK('2. Transparency'!F2),\"\",'2. Transparency'!F2)","v":""},{"$f":"IF(ISBLANK('2. Transparency'!G2),\"\",'2. Transparency'!G2)","v":""},{"$f":"IF(ISBLANK('2. Transparency'!H2),\"\",'2. Transparency'!H2)","v":""},{"$f":"IF(ISBLANK('2. Transparency'!I2),\"\",'2. Transparency'!I2)","v":""},{"$f":"IF(ISBLANK('2. Transparency'!J2),\"\",'2. Transparency'!J2)","v":""}]
[{"$f":"A34","v":"Transparency"},{"$f":"B34","v":2.1},{"$f":"C34","v":"Children (and parents or guardians, where appropriate) are proactively provided with privacy information at the time their personal information is collected from them or obtained."},"2.1.2","Ensure children (and parents or guardians, where appropriate) have an easy way to access privacy information on an ongoing basis.",{"$f":"IF(ISBLANK('2. Transparency'!E3),\"\",'2. Transparency'!E3)","v":""},{"$f":"IF(ISBLANK('2. Transparency'!F3),\"\",'2. Transparency'!F3)","v":""},{"$f":"IF(ISBLANK('2. Transparency'!G3),\"\",'2. Transparency'!G3)","v":""},{"$f":"IF(ISBLANK('2. Transparency'!H3),\"\",'2. Transparency'!H3)","v":""},{"$f":"IF(ISBLANK('2. Transparency'!I3),\"\",'2. Transparency'!I3)","v":""},{"$f":"IF(ISBLANK('2. Transparency'!J3),\"\",'2. Transparency'!J3)","v":""}]
["Transparency",2.1,"Children (and parents or guardians, where appropriate) are proactively provided with privacy information at the time their personal information is collected from them or obtained.","2.1.3","Provide children (and parents or guardians, where appropriate) with privacy information for any personal information you obtain indirectly from another source.",{"$f":"IF(ISBLANK('2. Transparency'!E4),\"\",'2. Transparency'!E4)","v":""},{"$f":"IF(ISBLANK('2. Transparency'!F4),\"\",'2. Transparency'!F4)","v":""},{"$f":"IF(ISBLANK('2. Transparency'!G4),\"\",'2. Transparency'!G4)","v":""},{"$f":"IF(ISBLANK('2. Transparency'!H4),\"\",'2. Transparency'!H4)","v":""},{"$f":"IF(ISBLANK('2. Transparency'!I4),\"\",'2. Transparency'!I4)","v":""},{"$f":"IF(ISBLANK('2. Transparency'!J4),\"\",'2. Transparency'!J4)","v":""}]
["Transparency",2.1,"Children (and parents or guardians, where appropriate) are proactively provided with privacy information at the time their personal information is collected from them or obtained.","2.1.4","Provide privacy information to children (and parents or guardians, where appropriate) using a combination of appropriate techniques and in bite-sized chunks at the point you use their information.",{"$f":"IF(ISBLANK('2. Transparency'!E5),\"\",'2. Transparency'!E5)","v":""},{"$f":"IF(ISBLANK('2. Transparency'!F5),\"\",'2. Transparency'!F5)","v":""},{"$f":"IF(ISBLANK('2. Transparency'!G5),\"\",'2. Transparency'!G5)","v":""},{"$f":"IF(ISBLANK('2. Transparency'!H5),\"\",'2. Transparency'!H5)","v":""},{"$f":"IF(ISBLANK('2. Transparency'!I5),\"\",'2. Transparency'!I5)","v":""},{"$f":"IF(ISBLANK('2. Transparency'!J5),\"\",'2. Transparency'!J5)","v":""}]
["Transparency",2.1,"Children (and parents or guardians, where appropriate) are proactively provided with privacy information at the time their personal information is collected from them or obtained.","2.1.5","Only use personal information in the ways you’ve described in your privacy information.",{"$f":"IF(ISBLANK('2. Transparency'!E6),\"\",'2. Transparency'!E6)","v":""},{"$f":"IF(ISBLANK('2. Transparency'!F6),\"\",'2. Transparency'!F6)","v":""},{"$f":"IF(ISBLANK('2. Transparency'!G6),\"\",'2. Transparency'!G6)","v":""},{"$f":"IF(ISBLANK('2. Transparency'!H6),\"\",'2. Transparency'!H6)","v":""},{"$f":"IF(ISBLANK('2. Transparency'!I6),\"\",'2. Transparency'!I6)","v":""},{"$f":"IF(ISBLANK('2. Transparency'!J6),\"\",'2. Transparency'!J6)","v":""}]
["Transparency",2.1,"Children (and parents or guardians, where appropriate) are proactively provided with privacy information at the time their personal information is collected from them or obtained.","2.1.6","Ensure privacy information is concise, transparent, intelligible and uses clear and plain language suitable for and tailored to the various ages of your users.",{"$f":"IF(ISBLANK('2. Transparency'!E7),\"\",'2. Transparency'!E7)","v":""},{"$f":"IF(ISBLANK('2. Transparency'!F7),\"\",'2. Transparency'!F7)","v":""},{"$f":"IF(ISBLANK('2. Transparency'!G7),\"\",'2. Transparency'!G7)","v":""},{"$f":"IF(ISBLANK('2. Transparency'!H7),\"\",'2. Transparency'!H7)","v":""},{"$f":"IF(ISBLANK('2. Transparency'!I7),\"\",'2. Transparency'!I7)","v":""},{"$f":"IF(ISBLANK('2. Transparency'!J7),\"\",'2. Transparency'!J7)","v":""}]
["Transparency",2.1,"Children (and parents or guardians, where appropriate) are proactively provided with privacy information at the time their personal information is collected from them or obtained.","2.1.7","Present information in a way likely to appeal to the age of child who is accessing your online service.",{"$f":"IF(ISBLANK('2. Transparency'!E8),\"\",'2. Transparency'!E8)","v":""},{"$f":"IF(ISBLANK('2. Transparency'!F8),\"\",'2. Transparency'!F8)","v":""},{"$f":"IF(ISBLANK('2. Transparency'!G8),\"\",'2. Transparency'!G8)","v":""},{"$f":"IF(ISBLANK('2. Transparency'!H8),\"\",'2. Transparency'!H8)","v":""},{"$f":"IF(ISBLANK('2. Transparency'!I8),\"\",'2. Transparency'!I8)","v":""},{"$f":"IF(ISBLANK('2. Transparency'!J8),\"\",'2. Transparency'!J8)","v":""}]
["Transparency",2.1,"Children (and parents or guardians, where appropriate) are proactively provided with privacy information at the time their personal information is collected from them or obtained.","2.1.8","Prompt children to speak to an adult before they activate any new use of their information. Advise them not to proceed if they are uncertain, if the child falls within an appropriate age range.",{"$f":"IF(ISBLANK('2. Transparency'!E9),\"\",'2. Transparency'!E9)","v":""},{"$f":"IF(ISBLANK('2. Transparency'!F9),\"\",'2. Transparency'!F9)","v":""},{"$f":"IF(ISBLANK('2. Transparency'!G9),\"\",'2. Transparency'!G9)","v":""},{"$f":"IF(ISBLANK('2. Transparency'!H9),\"\",'2. Transparency'!H9)","v":""},{"$f":"IF(ISBLANK('2. Transparency'!I9),\"\",'2. Transparency'!I9)","v":""},{"$f":"IF(ISBLANK('2. Transparency'!J9),\"\",'2. Transparency'!J9)","v":""}]
["Children's rights",3.1,"There are measures or tools in place to inform children about their rights and enable them to understand and exercise them.","3.1.1","Make tools easy for children to find that help them exercise their rights and report concerns.",{"$f":"IF(ISBLANK('3. Children''s rights '!E2),\"\",'3. Children''s rights '!E2)","v":""},{"$f":"IF(ISBLANK('3. Children''s rights '!F2),\"\",'3. Children''s rights '!F2)","v":""},{"$f":"IF(ISBLANK('3. Children''s rights '!G2),\"\",'3. Children''s rights '!G2)","v":""},{"$f":"IF(ISBLANK('3. Children''s rights '!H2),\"\",'3. Children''s rights '!H2)","v":""},{"$f":"IF(ISBLANK('3. Children''s rights '!I2),\"\",'3. Children''s rights '!I2)","v":""},{"$f":"IF(ISBLANK('3. Children''s rights '!J2),\"\",'3. Children''s rights '!J2)","v":""}]
[{"$f":"A42","v":"Children's rights"},{"$f":"B42","v":3.1},{"$f":"C42","v":"There are measures or tools in place to inform children about their rights and enable them to understand and exercise them."},"3.1.2","Ensure tools are age appropriate, tailored to support specific rights and easy to use.",{"$f":"IF(ISBLANK('3. Children''s rights '!E3),\"\",'3. Children''s rights '!E3)","v":""},{"$f":"IF(ISBLANK('3. Children''s rights '!F3),\"\",'3. Children''s rights '!F3)","v":""},{"$f":"IF(ISBLANK('3. Children''s rights '!G3),\"\",'3. Children''s rights '!G3)","v":""},{"$f":"IF(ISBLANK('3. Children''s rights '!H3),\"\",'3. Children''s rights '!H3)","v":""},{"$f":"IF(ISBLANK('3. Children''s rights '!I3),\"\",'3. Children''s rights '!I3)","v":""},{"$f":"IF(ISBLANK('3. Children''s rights '!J3),\"\",'3. Children''s rights '!J3)","v":""}]
["Children's rights",3.1,"There are measures or tools in place to inform children about their rights and enable them to understand and exercise them.","3.1.3","Communicate what is happening to a complaint or request, and include ways for the child or their parent to track the progress.",{"$f":"IF(ISBLANK('3. Children''s rights '!E4),\"\",'3. Children''s rights '!E4)","v":""},{"$f":"IF(ISBLANK('3. Children''s rights '!F4),\"\",'3. Children''s rights '!F4)","v":""},{"$f":"IF(ISBLANK('3. Children''s rights '!G4),\"\",'3. Children''s rights '!G4)","v":""},{"$f":"IF(ISBLANK('3. Children''s rights '!H4),\"\",'3. Children''s rights '!H4)","v":""},{"$f":"IF(ISBLANK('3. Children''s rights '!I4),\"\",'3. Children''s rights '!I4)","v":""},{"$f":"IF(ISBLANK('3. Children''s rights '!J4),\"\",'3. Children''s rights '!J4)","v":""}]
["Children's rights",3.1,"There are measures or tools in place to inform children about their rights and enable them to understand and exercise them.","3.1.4","Provide information about timescales for responding to requests from children and deal with all requests within the timescales set out in article 12(3) of the UK GDPR.",{"$f":"IF(ISBLANK('3. Children''s rights '!E5),\"\",'3. Children''s rights '!E5)","v":""},{"$f":"IF(ISBLANK('3. Children''s rights '!F5),\"\",'3. Children''s rights '!F5)","v":""},{"$f":"IF(ISBLANK('3. Children''s rights '!G5),\"\",'3. Children''s rights '!G5)","v":""},{"$f":"IF(ISBLANK('3. Children''s rights '!H5),\"\",'3. Children''s rights '!H5)","v":""},{"$f":"IF(ISBLANK('3. Children''s rights '!I5),\"\",'3. Children''s rights '!I5)","v":""},{"$f":"IF(ISBLANK('3. Children''s rights '!J5),\"\",'3. Children''s rights '!J5)","v":""}]
["Children's rights",3.1,"There are measures or tools in place to inform children about their rights and enable them to understand and exercise them.","3.1.5","Take swift action if you receive information indicating there is an ongoing safeguarding issue.",{"$f":"IF(ISBLANK('3. Children''s rights '!E6),\"\",'3. Children''s rights '!E6)","v":""},{"$f":"IF(ISBLANK('3. Children''s rights '!F6),\"\",'3. Children''s rights '!F6)","v":""},{"$f":"IF(ISBLANK('3. Children''s rights '!G6),\"\",'3. Children''s rights '!G6)","v":""},{"$f":"IF(ISBLANK('3. Children''s rights '!H6),\"\",'3. Children''s rights '!H6)","v":""},{"$f":"IF(ISBLANK('3. Children''s rights '!I6),\"\",'3. Children''s rights '!I6)","v":""},{"$f":"IF(ISBLANK('3. Children''s rights '!J6),\"\",'3. Children''s rights '!J6)","v":""}]
["DPIAs",4.0999999999999996,"The requirement for a DPIA is documented and online service developers are provided with clear guidance on the assessment criteria.","4.1.1","Reference DPIA requirements in all main project and change management policies and procedures.",{"$f":"IF(ISBLANK('4. DPIAs'!E2),\"\",'4. DPIAs'!E2)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!F2),\"\",'4. DPIAs'!F2)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!G2),\"\",'4. DPIAs'!G2)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!H2),\"\",'4. DPIAs'!H2)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!I2),\"\",'4. DPIAs'!I2)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!J2),\"\",'4. DPIAs'!J2)","v":""}]
[{"$f":"A47","v":"DPIAs"},{"$f":"B47","v":4.0999999999999996},{"$f":"C47","v":"The requirement for a DPIA is documented and online service developers are provided with clear guidance on the assessment criteria."},"4.1.2","Introduce a screening checklist to help you consider whether the processing falls within the scope of the code and is therefore likely to result in a high risk to the rights and freedoms of children. ",{"$f":"IF(ISBLANK('4. DPIAs'!E3),\"\",'4. DPIAs'!E3)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!F3),\"\",'4. DPIAs'!F3)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!G3),\"\",'4. DPIAs'!G3)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!H3),\"\",'4. DPIAs'!H3)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!I3),\"\",'4. DPIAs'!I3)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!J3),\"\",'4. DPIAs'!J3)","v":""}]
["DPIAs",4.0999999999999996,"The requirement for a DPIA is documented and online service developers are provided with clear guidance on the assessment criteria.","4.1.3","Document the DPIA process, provide staff with training on the application of the process and review it periodically to ensure it remains up-to-date.",{"$f":"IF(ISBLANK('4. DPIAs'!E4),\"\",'4. DPIAs'!E4)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!F4),\"\",'4. DPIAs'!F4)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!G4),\"\",'4. DPIAs'!G4)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!H4),\"\",'4. DPIAs'!H4)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!I4),\"\",'4. DPIAs'!I4)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!J4),\"\",'4. DPIAs'!J4)","v":""}]
["DPIAs",4.2,"DPIAs are undertaken before carrying out any new types of processing that are likely to result in a high risk to children's rights and freedoms. DPIAs cover the nature, scope, context and purposes of the processing.","4.2.1","Clearly structure DPIAs and take a layered approach, adding technical detail where appropriate.",{"$f":"IF(ISBLANK('4. DPIAs'!E5),\"\",'4. DPIAs'!E5)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!F5),\"\",'4. DPIAs'!F5)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!G5),\"\",'4. DPIAs'!G5)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!H5),\"\",'4. DPIAs'!H5)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!I5),\"\",'4. DPIAs'!I5)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!J5),\"\",'4. DPIAs'!J5)","v":""}]
["DPIAs",{"$f":"B50","v":4.2},{"$f":"C50","v":"DPIAs are undertaken before carrying out any new types of processing that are likely to result in a high risk to children's rights and freedoms. DPIAs cover the nature, scope, context and purposes of the processing."},"4.2.2","Ensure DPIAs:\n- \tdescribe the nature, scope, context and purposes of the processing in detail;\n- \tclearly consider and document the appropriate lawful basis and article 9 condition for processing;\n- \tclearly set out the relationships and information flows between controllers, processors, people and systems; \n- \tconsider the transparency of the processing and how to make children aware of their rights;\n- \toutline how the information is collected, stored, accessed and who it is shared with;\n- \tinclude information about measures to ensure accuracy, avoid bias and where relevant, explain the use of AI;\n- \tprovide specific details of technological security measures;\n- \tconsider whether the service can be delivered by less intrusive means or using minimal personal information; and\n- \taddress how each of the standards within the code are addressed.",{"$f":"IF(ISBLANK('4. DPIAs'!E6),\"\",'4. DPIAs'!E6)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!F6),\"\",'4. DPIAs'!F6)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!G6),\"\",'4. DPIAs'!G6)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!H6),\"\",'4. DPIAs'!H6)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!I6),\"\",'4. DPIAs'!I6)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!J6),\"\",'4. DPIAs'!J6)","v":""}]
["DPIAs",4.2,"DPIAs are undertaken before carrying out any new types of processing that are likely to result in a high risk to children's rights and freedoms. DPIAs cover the nature, scope, context and purposes of the processing.","4.2.3","Include an assessment of the online service for:\n- \tphysical harm; \n- \tonline grooming or other sexual exploitation; \n- \tsocial anxiety, self-esteem issues, bullying or peer pressure; \n- \taccess to harmful or inappropriate content; \n- \tmisinformation or undue restriction on information; \n- \tencouraging excessive risk-taking or unhealthy behaviour;\n- \tundermining parental authority or responsibility; \n- \tloss of autonomy or rights (including control over information); \n- \tcompulsive use or attention deficit disorders; \n- \texcessive screen time; \n- \tinterrupted or inadequate sleep patterns; \n- \teconomic exploitation or unfair commercial pressure; or \n- \tany other significant economic, social or developmental disadvantage.",{"$f":"IF(ISBLANK('4. DPIAs'!E7),\"\",'4. DPIAs'!E7)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!F7),\"\",'4. DPIAs'!F7)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!G7),\"\",'4. DPIAs'!G7)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!H7),\"\",'4. DPIAs'!H7)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!I7),\"\",'4. DPIAs'!I7)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!J7),\"\",'4. DPIAs'!J7)","v":""}]
["DPIAs",4.2,"DPIAs are undertaken before carrying out any new types of processing that are likely to result in a high risk to children's rights and freedoms. DPIAs cover the nature, scope, context and purposes of the processing.","4.2.4","Ensure DPIAs identify measures to eliminate or reduce all risks.",{"$f":"IF(ISBLANK('4. DPIAs'!E8),\"\",'4. DPIAs'!E8)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!F8),\"\",'4. DPIAs'!F8)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!G8),\"\",'4. DPIAs'!G8)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!H8),\"\",'4. DPIAs'!H8)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!I8),\"\",'4. DPIAs'!I8)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!J8),\"\",'4. DPIAs'!J8)","v":""}]
["DPIAs",4.2,"DPIAs are undertaken before carrying out any new types of processing that are likely to result in a high risk to children's rights and freedoms. DPIAs cover the nature, scope, context and purposes of the processing.","4.2.5","Record the advice and recommendations of the DPO in DPIAs and ensure they have been signed off by the appropriate people.",{"$f":"IF(ISBLANK('4. DPIAs'!E9),\"\",'4. DPIAs'!E9)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!F9),\"\",'4. DPIAs'!F9)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!G9),\"\",'4. DPIAs'!G9)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!H9),\"\",'4. DPIAs'!H9)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!I9),\"\",'4. DPIAs'!I9)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!J9),\"\",'4. DPIAs'!J9)","v":""}]
["DPIAs",4.2,"DPIAs are undertaken before carrying out any new types of processing that are likely to result in a high risk to children's rights and freedoms. DPIAs cover the nature, scope, context and purposes of the processing.","4.2.6","Carry out a consultation or fully document why this isn’t possible, is unnecessary, or disproportionate.",{"$f":"IF(ISBLANK('4. DPIAs'!E10),\"\",'4. DPIAs'!E10)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!F10),\"\",'4. DPIAs'!F10)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!G10),\"\",'4. DPIAs'!G10)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!H10),\"\",'4. DPIAs'!H10)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!I10),\"\",'4. DPIAs'!I10)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!J10),\"\",'4. DPIAs'!J10)","v":""}]
["DPIAs",4.2,"DPIAs are undertaken before carrying out any new types of processing that are likely to result in a high risk to children's rights and freedoms. DPIAs cover the nature, scope, context and purposes of the processing.","4.2.7","Establish a clear link between the DPIA and design processes, including details on how to prevent function creep.",{"$f":"IF(ISBLANK('4. DPIAs'!E11),\"\",'4. DPIAs'!E11)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!F11),\"\",'4. DPIAs'!F11)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!G11),\"\",'4. DPIAs'!G11)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!H11),\"\",'4. DPIAs'!H11)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!I11),\"\",'4. DPIAs'!I11)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!J11),\"\",'4. DPIAs'!J11)","v":""}]
["DPIAs",4.2,"DPIAs are undertaken before carrying out any new types of processing that are likely to result in a high risk to children's rights and freedoms. DPIAs cover the nature, scope, context and purposes of the processing.","4.2.8","Review DPIAs on a regular basis, particularly if you change or update service functionality or use.",{"$f":"IF(ISBLANK('4. DPIAs'!E12),\"\",'4. DPIAs'!E12)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!F12),\"\",'4. DPIAs'!F12)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!G12),\"\",'4. DPIAs'!G12)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!H12),\"\",'4. DPIAs'!H12)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!I12),\"\",'4. DPIAs'!I12)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!J12),\"\",'4. DPIAs'!J12)","v":""}]
["DPIAs",4.3,"The outputs of a DPIA are acted on to effectively mitigate or manage any risks identified.","4.3.1","Act on the outputs of your DPIA to effectively mitigate or manage any risks identified.",{"$f":"IF(ISBLANK('4. DPIAs'!E13),\"\",'4. DPIAs'!E13)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!F13),\"\",'4. DPIAs'!F13)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!G13),\"\",'4. DPIAs'!G13)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!H13),\"\",'4. DPIAs'!H13)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!I13),\"\",'4. DPIAs'!I13)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!J13),\"\",'4. DPIAs'!J13)","v":""}]
["DPIAs",{"$f":"B58","v":4.3},{"$f":"C58","v":"The outputs of a DPIA are acted on to effectively mitigate or manage any risks identified."},"4.3.2","Include a stage in the project or product management process to confirm that mitigating controls are in place.",{"$f":"IF(ISBLANK('4. DPIAs'!E14),\"\",'4. DPIAs'!E14)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!F14),\"\",'4. DPIAs'!F14)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!G14),\"\",'4. DPIAs'!G14)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!H14),\"\",'4. DPIAs'!H14)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!I14),\"\",'4. DPIAs'!I14)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!J14),\"\",'4. DPIAs'!J14)","v":""}]
["DPIAs",4.3,"The outputs of a DPIA are acted on to effectively mitigate or manage any risks identified.","4.3.3","Retain evidence to confirm that you did not start processing until you implemented mitigating controls.",{"$f":"IF(ISBLANK('4. DPIAs'!E15),\"\",'4. DPIAs'!E15)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!F15),\"\",'4. DPIAs'!F15)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!G15),\"\",'4. DPIAs'!G15)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!H15),\"\",'4. DPIAs'!H15)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!I15),\"\",'4. DPIAs'!I15)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!J15),\"\",'4. DPIAs'!J15)","v":""}]
["DPIAs",4.3,"The outputs of a DPIA are acted on to effectively mitigate or manage any risks identified.","4.3.4","Incorporate DPIAs into the project plan or project risk register.",{"$f":"IF(ISBLANK('4. DPIAs'!E16),\"\",'4. DPIAs'!E16)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!F16),\"\",'4. DPIAs'!F16)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!G16),\"\",'4. DPIAs'!G16)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!H16),\"\",'4. DPIAs'!H16)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!I16),\"\",'4. DPIAs'!I16)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!J16),\"\",'4. DPIAs'!J16)","v":""}]
["DPIAs",4.3,"The outputs of a DPIA are acted on to effectively mitigate or manage any risks identified.","4.3.5","Refer the DPIA to the ICO for review, if the residual risk is high and you cannot mitigate it further.",{"$f":"IF(ISBLANK('4. DPIAs'!E17),\"\",'4. DPIAs'!E17)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!F17),\"\",'4. DPIAs'!F17)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!G17),\"\",'4. DPIAs'!G17)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!H17),\"\",'4. DPIAs'!H17)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!I17),\"\",'4. DPIAs'!I17)","v":""},{"$f":"IF(ISBLANK('4. DPIAs'!J17),\"\",'4. DPIAs'!J17)","v":""}]
["Data minimisation",5.0999999999999996,"There is an assessment to determine and differentiate between each individual element of the service and consider what personal information is needed, and for how long, to deliver each one.","5.1.1","Document your reasons for collecting and processing personal information for each element of your service and consider the appropriate retention periods in the DPIA.",{"$f":"IF(ISBLANK('5. Data minimisation'!E2),\"\",'5. Data minimisation'!E2)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!F2),\"\",'5. Data minimisation'!F2)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!G2),\"\",'5. Data minimisation'!G2)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!H2),\"\",'5. Data minimisation'!H2)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!I2),\"\",'5. Data minimisation'!I2)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!J2),\"\",'5. Data minimisation'!J2)","v":""}]
[{"$f":"A63","v":"Data minimisation"},{"$f":"B63","v":5.0999999999999996},{"$f":"C63","v":"There is an assessment to determine and differentiate between each individual element of the service and consider what personal information is needed, and for how long, to deliver each one."},"5.1.2","Maintain a retention schedule that details how long you will retain the information.",{"$f":"IF(ISBLANK('5. Data minimisation'!E3),\"\",'5. Data minimisation'!E3)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!F3),\"\",'5. Data minimisation'!F3)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!G3),\"\",'5. Data minimisation'!G3)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!H3),\"\",'5. Data minimisation'!H3)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!I3),\"\",'5. Data minimisation'!I3)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!J3),\"\",'5. Data minimisation'!J3)","v":""}]
["Data minimisation",5.0999999999999996,"There is an assessment to determine and differentiate between each individual element of the service and consider what personal information is needed, and for how long, to deliver each one.","5.1.3","Consider the information you collect in order to develop your service that you may no longer need when applying retention periods.",{"$f":"IF(ISBLANK('5. Data minimisation'!E4),\"\",'5. Data minimisation'!E4)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!F4),\"\",'5. Data minimisation'!F4)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!G4),\"\",'5. Data minimisation'!G4)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!H4),\"\",'5. Data minimisation'!H4)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!I4),\"\",'5. Data minimisation'!I4)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!J4),\"\",'5. Data minimisation'!J4)","v":""}]
["Data minimisation",5.0999999999999996,"There is an assessment to determine and differentiate between each individual element of the service and consider what personal information is needed, and for how long, to deliver each one.","5.1.4","Implement measures so that you only collect the minimum amount of information (eg only collect the information you need for each element of the service the child is actively engaged with).",{"$f":"IF(ISBLANK('5. Data minimisation'!E5),\"\",'5. Data minimisation'!E5)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!F5),\"\",'5. Data minimisation'!F5)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!G5),\"\",'5. Data minimisation'!G5)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!H5),\"\",'5. Data minimisation'!H5)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!I5),\"\",'5. Data minimisation'!I5)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!J5),\"\",'5. Data minimisation'!J5)","v":""}]
["Data minimisation",5.0999999999999996,"There is an assessment to determine and differentiate between each individual element of the service and consider what personal information is needed, and for how long, to deliver each one.","5.1.5","When you offer service enhancements, avoid ‘bundling in’ or collecting additional information on top of the personal information you need to deliver your core services.  ",{"$f":"IF(ISBLANK('5. Data minimisation'!E6),\"\",'5. Data minimisation'!E6)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!F6),\"\",'5. Data minimisation'!F6)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!G6),\"\",'5. Data minimisation'!G6)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!H6),\"\",'5. Data minimisation'!H6)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!I6),\"\",'5. Data minimisation'!I6)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!J6),\"\",'5. Data minimisation'!J6)","v":""}]
["Data minimisation",5.0999999999999996,"There is an assessment to determine and differentiate between each individual element of the service and consider what personal information is needed, and for how long, to deliver each one.","5.1.6","Give children as much choice as possible over which elements of the service they wish to use and therefore how much personal information they need to provide.",{"$f":"IF(ISBLANK('5. Data minimisation'!E7),\"\",'5. Data minimisation'!E7)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!F7),\"\",'5. Data minimisation'!F7)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!G7),\"\",'5. Data minimisation'!G7)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!H7),\"\",'5. Data minimisation'!H7)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!I7),\"\",'5. Data minimisation'!I7)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!J7),\"\",'5. Data minimisation'!J7)","v":""}]
["Data minimisation",5.0999999999999996,"There is an assessment to determine and differentiate between each individual element of the service and consider what personal information is needed, and for how long, to deliver each one.","5.1.7","Provide children with a choice about whether they wish their personal information to be used for each additional purpose or service enhancement (eg through the default privacy settings).",{"$f":"IF(ISBLANK('5. Data minimisation'!E8),\"\",'5. Data minimisation'!E8)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!F8),\"\",'5. Data minimisation'!F8)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!G8),\"\",'5. Data minimisation'!G8)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!H8),\"\",'5. Data minimisation'!H8)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!I8),\"\",'5. Data minimisation'!I8)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!J8),\"\",'5. Data minimisation'!J8)","v":""}]
["Data minimisation",5.2,"There are regular reviews of the information held and weeding activities are undertaken to reduce excessive or unnecessary personal information. Information is deleted in line with the retention schedule.","5.2.1","Understand how data flows into, around, and out of your service and document this in data flow maps.",{"$f":"IF(ISBLANK('5. Data minimisation'!E9),\"\",'5. Data minimisation'!E9)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!F9),\"\",'5. Data minimisation'!F9)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!G9),\"\",'5. Data minimisation'!G9)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!H9),\"\",'5. Data minimisation'!H9)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!I9),\"\",'5. Data minimisation'!I9)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!J9),\"\",'5. Data minimisation'!J9)","v":""}]
["Data minimisation",{"$f":"B70","v":5.2},{"$f":"C70","v":"There are regular reviews of the information held and weeding activities are undertaken to reduce excessive or unnecessary personal information. Information is deleted in line with the retention schedule."},"5.2.2"," Weed information according to the retention schedule.",{"$f":"IF(ISBLANK('5. Data minimisation'!E10),\"\",'5. Data minimisation'!E10)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!F10),\"\",'5. Data minimisation'!F10)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!G10),\"\",'5. Data minimisation'!G10)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!H10),\"\",'5. Data minimisation'!H10)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!I10),\"\",'5. Data minimisation'!I10)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!J10),\"\",'5. Data minimisation'!J10)","v":""}]
["Data minimisation",5.2,"There are regular reviews of the information held and weeding activities are undertaken to reduce excessive or unnecessary personal information. Information is deleted in line with the retention schedule.","5.2.3","Delete information you no longer need or is out-of-date (or put it beyond reach).",{"$f":"IF(ISBLANK('5. Data minimisation'!E11),\"\",'5. Data minimisation'!E11)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!F11),\"\",'5. Data minimisation'!F11)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!G11),\"\",'5. Data minimisation'!G11)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!H11),\"\",'5. Data minimisation'!H11)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!I11),\"\",'5. Data minimisation'!I11)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!J11),\"\",'5. Data minimisation'!J11)","v":""}]
["Data minimisation",5.2,"There are regular reviews of the information held and weeding activities are undertaken to reduce excessive or unnecessary personal information. Information is deleted in line with the retention schedule.","5.2.4","Pseudonymise or anonymise information you still need for research purposes or for continued service accuracy (eg in AI systems) wherever possible.",{"$f":"IF(ISBLANK('5. Data minimisation'!E12),\"\",'5. Data minimisation'!E12)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!F12),\"\",'5. Data minimisation'!F12)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!G12),\"\",'5. Data minimisation'!G12)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!H12),\"\",'5. Data minimisation'!H12)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!I12),\"\",'5. Data minimisation'!I12)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!J12),\"\",'5. Data minimisation'!J12)","v":""}]
["Data minimisation",5.2,"There are regular reviews of the information held and weeding activities are undertaken to reduce excessive or unnecessary personal information. Information is deleted in line with the retention schedule.","5.2.5","If there are changes to service functionality or features, review the DPIA and retention schedule to ensure you only: \n- \tcollect the minimum information you now need; and\n- \tdelete any information you hold that you no longer require.",{"$f":"IF(ISBLANK('5. Data minimisation'!E13),\"\",'5. Data minimisation'!E13)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!F13),\"\",'5. Data minimisation'!F13)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!G13),\"\",'5. Data minimisation'!G13)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!H13),\"\",'5. Data minimisation'!H13)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!I13),\"\",'5. Data minimisation'!I13)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!J13),\"\",'5. Data minimisation'!J13)","v":""}]
["Data minimisation",5.2,"There are regular reviews of the information held and weeding activities are undertaken to reduce excessive or unnecessary personal information. Information is deleted in line with the retention schedule.","5.2.6"," Give children easy options to request you delete their personal information.",{"$f":"IF(ISBLANK('5. Data minimisation'!E14),\"\",'5. Data minimisation'!E14)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!F14),\"\",'5. Data minimisation'!F14)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!G14),\"\",'5. Data minimisation'!G14)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!H14),\"\",'5. Data minimisation'!H14)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!I14),\"\",'5. Data minimisation'!I14)","v":""},{"$f":"IF(ISBLANK('5. Data minimisation'!J14),\"\",'5. Data minimisation'!J14)","v":""}]
["Data sharing",6.1,"There are measures in place to ensure that if children’s personal information is shared with others, it is done so in a fair and transparent manner.","6.1.1","Provide privacy information to children that makes it clear what, when and who you might share their personal information with.",{"$f":"IF(ISBLANK('6. Data sharing'!E2),\"\",'6. Data sharing'!E2)","v":""},{"$f":"IF(ISBLANK('6. Data sharing'!F2),\"\",'6. Data sharing'!F2)","v":""},{"$f":"IF(ISBLANK('6. Data sharing'!G2),\"\",'6. Data sharing'!G2)","v":""},{"$f":"IF(ISBLANK('6. Data sharing'!H2),\"\",'6. Data sharing'!H2)","v":""},{"$f":"IF(ISBLANK('6. Data sharing'!I2),\"\",'6. Data sharing'!I2)","v":""},{"$f":"IF(ISBLANK('6. Data sharing'!J2),\"\",'6. Data sharing'!J2)","v":""}]
[{"$f":"A76","v":"Data sharing"},{"$f":"B76","v":6.1},{"$f":"C76","v":"There are measures in place to ensure that if children’s personal information is shared with others, it is done so in a fair and transparent manner."},"6.1.2","Ask senior management to authorise all sharing decisions and document their authorisation.",{"$f":"IF(ISBLANK('6. Data sharing'!E3),\"\",'6. Data sharing'!E3)","v":""},{"$f":"IF(ISBLANK('6. Data sharing'!F3),\"\",'6. Data sharing'!F3)","v":""},{"$f":"IF(ISBLANK('6. Data sharing'!G3),\"\",'6. Data sharing'!G3)","v":""},{"$f":"IF(ISBLANK('6. Data sharing'!H3),\"\",'6. Data sharing'!H3)","v":""},{"$f":"IF(ISBLANK('6. Data sharing'!I3),\"\",'6. Data sharing'!I3)","v":""},{"$f":"IF(ISBLANK('6. Data sharing'!J3),\"\",'6. Data sharing'!J3)","v":""}]
["Data sharing",6.1,"There are measures in place to ensure that if children’s personal information is shared with others, it is done so in a fair and transparent manner.","6.1.3","Consider and document all the relevant issues and risks to the child associated with any data sharing and ensure you fully mitigate these risks.",{"$f":"IF(ISBLANK('6. Data sharing'!E4),\"\",'6. Data sharing'!E4)","v":""},{"$f":"IF(ISBLANK('6. Data sharing'!F4),\"\",'6. Data sharing'!F4)","v":""},{"$f":"IF(ISBLANK('6. Data sharing'!G4),\"\",'6. Data sharing'!G4)","v":""},{"$f":"IF(ISBLANK('6. Data sharing'!H4),\"\",'6. Data sharing'!H4)","v":""},{"$f":"IF(ISBLANK('6. Data sharing'!I4),\"\",'6. Data sharing'!I4)","v":""},{"$f":"IF(ISBLANK('6. Data sharing'!J4),\"\",'6. Data sharing'!J4)","v":""}]
["Data sharing",6.1,"There are measures in place to ensure that if children’s personal information is shared with others, it is done so in a fair and transparent manner.","6.1.4","Confirm that the ‘best interests of the child’ are a primary consideration whenever you share children’s personal information.",{"$f":"IF(ISBLANK('6. Data sharing'!E5),\"\",'6. Data sharing'!E5)","v":""},{"$f":"IF(ISBLANK('6. Data sharing'!F5),\"\",'6. Data sharing'!F5)","v":""},{"$f":"IF(ISBLANK('6. Data sharing'!G5),\"\",'6. Data sharing'!G5)","v":""},{"$f":"IF(ISBLANK('6. Data sharing'!H5),\"\",'6. Data sharing'!H5)","v":""},{"$f":"IF(ISBLANK('6. Data sharing'!I5),\"\",'6. Data sharing'!I5)","v":""},{"$f":"IF(ISBLANK('6. Data sharing'!J5),\"\",'6. Data sharing'!J5)","v":""}]
["Data sharing",6.1,"There are measures in place to ensure that if children’s personal information is shared with others, it is done so in a fair and transparent manner.","6.1.5","Conduct an assessment of the legality of the sharing.",{"$f":"IF(ISBLANK('6. Data sharing'!E6),\"\",'6. Data sharing'!E6)","v":""},{"$f":"IF(ISBLANK('6. Data sharing'!F6),\"\",'6. Data sharing'!F6)","v":""},{"$f":"IF(ISBLANK('6. Data sharing'!G6),\"\",'6. Data sharing'!G6)","v":""},{"$f":"IF(ISBLANK('6. Data sharing'!H6),\"\",'6. Data sharing'!H6)","v":""},{"$f":"IF(ISBLANK('6. Data sharing'!I6),\"\",'6. Data sharing'!I6)","v":""},{"$f":"IF(ISBLANK('6. Data sharing'!J6),\"\",'6. Data sharing'!J6)","v":""}]
["Data sharing",6.1,"There are measures in place to ensure that if children’s personal information is shared with others, it is done so in a fair and transparent manner.","6.1.6","Undertake due diligence checks with any third parties you share information with to check the adequacy of their data protection practices and limit any further distribution of the information.",{"$f":"IF(ISBLANK('6. Data sharing'!E7),\"\",'6. Data sharing'!E7)","v":""},{"$f":"IF(ISBLANK('6. Data sharing'!F7),\"\",'6. Data sharing'!F7)","v":""},{"$f":"IF(ISBLANK('6. Data sharing'!G7),\"\",'6. Data sharing'!G7)","v":""},{"$f":"IF(ISBLANK('6. Data sharing'!H7),\"\",'6. Data sharing'!H7)","v":""},{"$f":"IF(ISBLANK('6. Data sharing'!I7),\"\",'6. Data sharing'!I7)","v":""},{"$f":"IF(ISBLANK('6. Data sharing'!J7),\"\",'6. Data sharing'!J7)","v":""}]
["Data sharing",6.1,"There are measures in place to ensure that if children’s personal information is shared with others, it is done so in a fair and transparent manner.","6.1.7","Give children the option to opt out of the sharing of their information, if this is not a core function of your service.",{"$f":"IF(ISBLANK('6. Data sharing'!E8),\"\",'6. Data sharing'!E8)","v":""},{"$f":"IF(ISBLANK('6. Data sharing'!F8),\"\",'6. Data sharing'!F8)","v":""},{"$f":"IF(ISBLANK('6. Data sharing'!G8),\"\",'6. Data sharing'!G8)","v":""},{"$f":"IF(ISBLANK('6. Data sharing'!H8),\"\",'6. Data sharing'!H8)","v":""},{"$f":"IF(ISBLANK('6. Data sharing'!I8),\"\",'6. Data sharing'!I8)","v":""},{"$f":"IF(ISBLANK('6. Data sharing'!J8),\"\",'6. Data sharing'!J8)","v":""}]
["Age assurance",7.1,"An assessment has been completed to consider and document the most appropriate age assurance method(s) based on the risks posed to children’s privacy. Methods are in place to establish age which are appropriate to the privacy risks that arise from the personal information being processed.","7.1.1","Use research to determine whether any age assurance measures may deter children from accessing services, even those designed for them.",{"$f":"IF(ISBLANK('7. Age assurance'!E2),\"\",'7. Age assurance'!E2)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!F2),\"\",'7. Age assurance'!F2)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!G2),\"\",'7. Age assurance'!G2)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!H2),\"\",'7. Age assurance'!H2)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!I2),\"\",'7. Age assurance'!I2)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!J2),\"\",'7. Age assurance'!J2)","v":""}]
[{"$f":"A83","v":"Age assurance"},{"$f":"B83","v":7.1},{"$f":"C83","v":"An assessment has been completed to consider and document the most appropriate age assurance method(s) based on the risks posed to children’s privacy. Methods are in place to establish age which are appropriate to the privacy risks that arise from the personal information being processed."},"7.1.2","Assess various options available for verifying the actual age of users or the audience.",{"$f":"IF(ISBLANK('7. Age assurance'!E3),\"\",'7. Age assurance'!E3)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!F3),\"\",'7. Age assurance'!F3)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!G3),\"\",'7. Age assurance'!G3)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!H3),\"\",'7. Age assurance'!H3)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!I3),\"\",'7. Age assurance'!I3)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!J3),\"\",'7. Age assurance'!J3)","v":""}]
["Age assurance",7.1,"An assessment has been completed to consider and document the most appropriate age assurance method(s) based on the risks posed to children’s privacy. Methods are in place to establish age which are appropriate to the privacy risks that arise from the personal information being processed.","7.1.3","Consider the risks and apply mitigating controls for predicted or estimated age assurance vs substantiated age checks.",{"$f":"IF(ISBLANK('7. Age assurance'!E4),\"\",'7. Age assurance'!E4)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!F4),\"\",'7. Age assurance'!F4)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!G4),\"\",'7. Age assurance'!G4)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!H4),\"\",'7. Age assurance'!H4)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!I4),\"\",'7. Age assurance'!I4)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!J4),\"\",'7. Age assurance'!J4)","v":""}]
["Age assurance",7.1,"An assessment has been completed to consider and document the most appropriate age assurance method(s) based on the risks posed to children’s privacy. Methods are in place to establish age which are appropriate to the privacy risks that arise from the personal information being processed.","7.1.4","Consider which method of age assurance to apply depending on whether the service is used by authenticated or non-authenticated users (eg whether people are logged in). Select appropriate age assurance measure(s) that are sufficiently robust and effective.",{"$f":"IF(ISBLANK('7. Age assurance'!E5),\"\",'7. Age assurance'!E5)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!F5),\"\",'7. Age assurance'!F5)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!G5),\"\",'7. Age assurance'!G5)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!H5),\"\",'7. Age assurance'!H5)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!I5),\"\",'7. Age assurance'!I5)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!J5),\"\",'7. Age assurance'!J5)","v":""}]
["Age assurance",7.1,"An assessment has been completed to consider and document the most appropriate age assurance method(s) based on the risks posed to children’s privacy. Methods are in place to establish age which are appropriate to the privacy risks that arise from the personal information being processed.","7.1.5","Avoid solely relying on methods of self-declaration (when a user simply states their age or date of birth but does not provide any evidence to confirm it), if there may be a risk to the child if unverified. ",{"$f":"IF(ISBLANK('7. Age assurance'!E6),\"\",'7. Age assurance'!E6)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!F6),\"\",'7. Age assurance'!F6)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!G6),\"\",'7. Age assurance'!G6)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!H6),\"\",'7. Age assurance'!H6)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!I6),\"\",'7. Age assurance'!I6)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!J6),\"\",'7. Age assurance'!J6)","v":""}]
["Age assurance",7.1,"An assessment has been completed to consider and document the most appropriate age assurance method(s) based on the risks posed to children’s privacy. Methods are in place to establish age which are appropriate to the privacy risks that arise from the personal information being processed.","7.1.6","Ensure when you use a self-declaration age gate that:\n- \tthis is proportionate based on the risks to children of accessing the online service;\n- \tthere is clear evidence that it is sufficiently robust and effective; and\n- \tage gates are not extensions of the online service (ie the age-gating page doesn't allow access to parts of the online service or content before age assurance occurs).",{"$f":"IF(ISBLANK('7. Age assurance'!E7),\"\",'7. Age assurance'!E7)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!F7),\"\",'7. Age assurance'!F7)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!G7),\"\",'7. Age assurance'!G7)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!H7),\"\",'7. Age assurance'!H7)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!I7),\"\",'7. Age assurance'!I7)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!J7),\"\",'7. Age assurance'!J7)","v":""}]
["Age assurance",7.1,"An assessment has been completed to consider and document the most appropriate age assurance method(s) based on the risks posed to children’s privacy. Methods are in place to establish age which are appropriate to the privacy risks that arise from the personal information being processed.","7.1.7","Collect the minimum amount of personal information you need to give an appropriate level of certainty about the age of individual people.",{"$f":"IF(ISBLANK('7. Age assurance'!E8),\"\",'7. Age assurance'!E8)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!F8),\"\",'7. Age assurance'!F8)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!G8),\"\",'7. Age assurance'!G8)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!H8),\"\",'7. Age assurance'!H8)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!I8),\"\",'7. Age assurance'!I8)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!J8),\"\",'7. Age assurance'!J8)","v":""}]
["Age assurance",7.1,"An assessment has been completed to consider and document the most appropriate age assurance method(s) based on the risks posed to children’s privacy. Methods are in place to establish age which are appropriate to the privacy risks that arise from the personal information being processed.","7.1.8","Consider how the implementation of age assurance could increase the risk of intrusive information collection.",{"$f":"IF(ISBLANK('7. Age assurance'!E9),\"\",'7. Age assurance'!E9)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!F9),\"\",'7. Age assurance'!F9)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!G9),\"\",'7. Age assurance'!G9)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!H9),\"\",'7. Age assurance'!H9)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!I9),\"\",'7. Age assurance'!I9)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!J9),\"\",'7. Age assurance'!J9)","v":""}]
["Age assurance",7.1,"An assessment has been completed to consider and document the most appropriate age assurance method(s) based on the risks posed to children’s privacy. Methods are in place to establish age which are appropriate to the privacy risks that arise from the personal information being processed.","7.1.9","Ask for confirmation of age from the main (confirmed adult) account holder to set up child profiles and restrict further access with a password or PIN if there are already registered adult account holders.",{"$f":"IF(ISBLANK('7. Age assurance'!E10),\"\",'7. Age assurance'!E10)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!F10),\"\",'7. Age assurance'!F10)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!G10),\"\",'7. Age assurance'!G10)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!H10),\"\",'7. Age assurance'!H10)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!I10),\"\",'7. Age assurance'!I10)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!J10),\"\",'7. Age assurance'!J10)","v":""}]
["Age assurance",7.1,"An assessment has been completed to consider and document the most appropriate age assurance method(s) based on the risks posed to children’s privacy. Methods are in place to establish age which are appropriate to the privacy risks that arise from the personal information being processed.","7.1.10"," Use technical measures to discourage false declarations of age (eg prevent people from immediately resubmitting a new age if they are denied access to your service when they first self-declare their age). ",{"$f":"IF(ISBLANK('7. Age assurance'!E11),\"\",'7. Age assurance'!E11)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!F11),\"\",'7. Age assurance'!F11)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!G11),\"\",'7. Age assurance'!G11)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!H11),\"\",'7. Age assurance'!H11)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!I11),\"\",'7. Age assurance'!I11)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!J11),\"\",'7. Age assurance'!J11)","v":""}]
["Age assurance",7.1,"An assessment has been completed to consider and document the most appropriate age assurance method(s) based on the risks posed to children’s privacy. Methods are in place to establish age which are appropriate to the privacy risks that arise from the personal information being processed.","7.1.11","Avoid giving people no choice but to provide hard identifiers, unless the processing risks really warrant such an approach. If used, consider the impacts on privacy to the child.",{"$f":"IF(ISBLANK('7. Age assurance'!E12),\"\",'7. Age assurance'!E12)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!F12),\"\",'7. Age assurance'!F12)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!G12),\"\",'7. Age assurance'!G12)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!H12),\"\",'7. Age assurance'!H12)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!I12),\"\",'7. Age assurance'!I12)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!J12),\"\",'7. Age assurance'!J12)","v":""}]
["Age assurance",7.1,"An assessment has been completed to consider and document the most appropriate age assurance method(s) based on the risks posed to children’s privacy. Methods are in place to establish age which are appropriate to the privacy risks that arise from the personal information being processed.","7.1.12","Assess the risks of children younger than the minimum age accessing your online service and its content.",{"$f":"IF(ISBLANK('7. Age assurance'!E13),\"\",'7. Age assurance'!E13)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!F13),\"\",'7. Age assurance'!F13)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!G13),\"\",'7. Age assurance'!G13)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!H13),\"\",'7. Age assurance'!H13)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!I13),\"\",'7. Age assurance'!I13)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!J13),\"\",'7. Age assurance'!J13)","v":""}]
["Age assurance",7.2,"Appropriate technical and organisational measures are implemented to protect personal information that is collected in order to assure age (and ensure this information is not then repurposed).","7.2.1","Implement appropriate security measures (eg restricted access or encryption) to protect information you collect for age verification.",{"$f":"IF(ISBLANK('7. Age assurance'!E14),\"\",'7. Age assurance'!E14)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!F14),\"\",'7. Age assurance'!F14)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!G14),\"\",'7. Age assurance'!G14)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!H14),\"\",'7. Age assurance'!H14)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!I14),\"\",'7. Age assurance'!I14)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!J14),\"\",'7. Age assurance'!J14)","v":""}]
["Age assurance",{"$f":"B95","v":7.2},{"$f":"C95","v":"Appropriate technical and organisational measures are implemented to protect personal information that is collected in order to assure age (and ensure this information is not then repurposed)."},"7.2.2","Assess the likelihood of a security breach or attack (eg a model inversion attack to re-identify a child).",{"$f":"IF(ISBLANK('7. Age assurance'!E15),\"\",'7. Age assurance'!E15)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!F15),\"\",'7. Age assurance'!F15)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!G15),\"\",'7. Age assurance'!G15)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!H15),\"\",'7. Age assurance'!H15)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!I15),\"\",'7. Age assurance'!I15)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!J15),\"\",'7. Age assurance'!J15)","v":""}]
["Age assurance",7.2,"Appropriate technical and organisational measures are implemented to protect personal information that is collected in order to assure age (and ensure this information is not then repurposed).","7.2.3","Ensure information you collect for age assurance is not re-purposed for other purposes (eg targeting children with advertising for products they might like, or sending them details of birthday offers without explicit consent).",{"$f":"IF(ISBLANK('7. Age assurance'!E16),\"\",'7. Age assurance'!E16)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!F16),\"\",'7. Age assurance'!F16)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!G16),\"\",'7. Age assurance'!G16)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!H16),\"\",'7. Age assurance'!H16)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!I16),\"\",'7. Age assurance'!I16)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!J16),\"\",'7. Age assurance'!J16)","v":""}]
["Age assurance",7.3,"There has been a clear decision documented about the minimum success criteria for statistical accuracy of any proposed age estimation (AE) or age verification (AV) solutions. The solution is tested against this criteria.","7.3.1","Implement measures to provide confidence in the age range that child users fall into.",{"$f":"IF(ISBLANK('7. Age assurance'!E17),\"\",'7. Age assurance'!E17)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!F17),\"\",'7. Age assurance'!F17)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!G17),\"\",'7. Age assurance'!G17)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!H17),\"\",'7. Age assurance'!H17)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!I17),\"\",'7. Age assurance'!I17)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!J17),\"\",'7. Age assurance'!J17)","v":""}]
["Age assurance",{"$f":"B98","v":7.3},{"$f":"C98","v":"There has been a clear decision documented about the minimum success criteria for statistical accuracy of any proposed age estimation (AE) or age verification (AV) solutions. The solution is tested against this criteria."},"7.3.2","Document the accuracy tolerance levels in either internal design documents or third-party contracts (if the AE is supplied by a third party).",{"$f":"IF(ISBLANK('7. Age assurance'!E18),\"\",'7. Age assurance'!E18)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!F18),\"\",'7. Age assurance'!F18)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!G18),\"\",'7. Age assurance'!G18)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!H18),\"\",'7. Age assurance'!H18)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!I18),\"\",'7. Age assurance'!I18)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!J18),\"\",'7. Age assurance'!J18)","v":""}]
["Age assurance",7.3,"There has been a clear decision documented about the minimum success criteria for statistical accuracy of any proposed age estimation (AE) or age verification (AV) solutions. The solution is tested against this criteria.","7.3.3","Complete due diligence before procuring a third party AE system to understand and confirm the level of statistical accuracy that you can expect.",{"$f":"IF(ISBLANK('7. Age assurance'!E19),\"\",'7. Age assurance'!E19)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!F19),\"\",'7. Age assurance'!F19)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!G19),\"\",'7. Age assurance'!G19)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!H19),\"\",'7. Age assurance'!H19)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!I19),\"\",'7. Age assurance'!I19)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!J19),\"\",'7. Age assurance'!J19)","v":""}]
["Age assurance",7.3,"There has been a clear decision documented about the minimum success criteria for statistical accuracy of any proposed age estimation (AE) or age verification (AV) solutions. The solution is tested against this criteria.","7.3.4","Document and implement a test plan which includes tolerances for errors as a result of testing the solution.",{"$f":"IF(ISBLANK('7. Age assurance'!E20),\"\",'7. Age assurance'!E20)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!F20),\"\",'7. Age assurance'!F20)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!G20),\"\",'7. Age assurance'!G20)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!H20),\"\",'7. Age assurance'!H20)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!I20),\"\",'7. Age assurance'!I20)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!J20),\"\",'7. Age assurance'!J20)","v":""}]
["Age assurance",7.4,"Privacy information is provided at the point of AE or AV activation to explain how automated decisions are made, in a way that people can understand.","7.4.1","Communicate the methods deployed to confirm a person’s age as part of the verification process to ensure transparency.",{"$f":"IF(ISBLANK('7. Age assurance'!E21),\"\",'7. Age assurance'!E21)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!F21),\"\",'7. Age assurance'!F21)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!G21),\"\",'7. Age assurance'!G21)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!H21),\"\",'7. Age assurance'!H21)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!I21),\"\",'7. Age assurance'!I21)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!J21),\"\",'7. Age assurance'!J21)","v":""}]
["Age assurance",{"$f":"B102","v":7.4},{"$f":"C102","v":"Privacy information is provided at the point of AE or AV activation to explain how automated decisions are made, in a way that people can understand."},"7.4.2","Clarify in the privacy information you provide at the point of the AE or AV check: \n- \twhy you are doing the checks; \n- \twhat information you are collecting; \n- \twho you are sharing it with; \n- \thow long you are keeping it; and \n- \thow people can challenge the result of the check.",{"$f":"IF(ISBLANK('7. Age assurance'!E22),\"\",'7. Age assurance'!E22)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!F22),\"\",'7. Age assurance'!F22)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!G22),\"\",'7. Age assurance'!G22)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!H22),\"\",'7. Age assurance'!H22)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!I22),\"\",'7. Age assurance'!I22)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!J22),\"\",'7. Age assurance'!J22)","v":""}]
["Age assurance",7.4,"Privacy information is provided at the point of AE or AV activation to explain how automated decisions are made, in a way that people can understand.","7.4.3","Ensure the information you provide is age appropriate to the user.",{"$f":"IF(ISBLANK('7. Age assurance'!E23),\"\",'7. Age assurance'!E23)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!F23),\"\",'7. Age assurance'!F23)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!G23),\"\",'7. Age assurance'!G23)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!H23),\"\",'7. Age assurance'!H23)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!I23),\"\",'7. Age assurance'!I23)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!J23),\"\",'7. Age assurance'!J23)","v":""}]
["Age assurance",7.5,"If an automated age assurance process is deployed that could potentially deny someone access to the platform or service, there are processes in place for people to: \n- \tchallenge the outcome; \n- \trequest a human review of the decision; and \n- \trequest the information is rectified appropriately.","7.5.1","Provide a simple way for children to ask you to reconsider an automated decision.",{"$f":"IF(ISBLANK('7. Age assurance'!E24),\"\",'7. Age assurance'!E24)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!F24),\"\",'7. Age assurance'!F24)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!G24),\"\",'7. Age assurance'!G24)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!H24),\"\",'7. Age assurance'!H24)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!I24),\"\",'7. Age assurance'!I24)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!J24),\"\",'7. Age assurance'!J24)","v":""}]
["Age assurance",{"$f":"B105","v":7.5},{"$f":"C105","v":"If an automated age assurance process is deployed that could potentially deny someone access to the platform or service, there are processes in place for people to: \n- \tchallenge the outcome; \n- \trequest a human review of the decision; and \n- \trequest the information is rectified appropriately."},"7.5.2","Include an element of human interaction and review, if an automated decision is challenged.",{"$f":"IF(ISBLANK('7. Age assurance'!E25),\"\",'7. Age assurance'!E25)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!F25),\"\",'7. Age assurance'!F25)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!G25),\"\",'7. Age assurance'!G25)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!H25),\"\",'7. Age assurance'!H25)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!I25),\"\",'7. Age assurance'!I25)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!J25),\"\",'7. Age assurance'!J25)","v":""}]
["Age assurance",7.5,"If an automated age assurance process is deployed that could potentially deny someone access to the platform or service, there are processes in place for people to: \n- \tchallenge the outcome; \n- \trequest a human review of the decision; and \n- \trequest the information is rectified appropriately.","7.5.3","Give an opportunity for children to provide additional information or gain parental consent to access a system or service, if appropriate.",{"$f":"IF(ISBLANK('7. Age assurance'!E26),\"\",'7. Age assurance'!E26)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!F26),\"\",'7. Age assurance'!F26)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!G26),\"\",'7. Age assurance'!G26)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!H26),\"\",'7. Age assurance'!H26)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!I26),\"\",'7. Age assurance'!I26)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!J26),\"\",'7. Age assurance'!J26)","v":""}]
["Age assurance",7.5,"If an automated age assurance process is deployed that could potentially deny someone access to the platform or service, there are processes in place for people to: \n- \tchallenge the outcome; \n- \trequest a human review of the decision; and \n- \trequest the information is rectified appropriately.","7.5.4","If a challenge is upheld following investigation, review the accuracy of the solution to determine if outputs still fall within acceptable accuracy tolerances.",{"$f":"IF(ISBLANK('7. Age assurance'!E27),\"\",'7. Age assurance'!E27)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!F27),\"\",'7. Age assurance'!F27)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!G27),\"\",'7. Age assurance'!G27)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!H27),\"\",'7. Age assurance'!H27)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!I27),\"\",'7. Age assurance'!I27)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!J27),\"\",'7. Age assurance'!J27)","v":""}]
["Age assurance",7.5,"If an automated age assurance process is deployed that could potentially deny someone access to the platform or service, there are processes in place for people to: \n- \tchallenge the outcome; \n- \trequest a human review of the decision; and \n- \trequest the information is rectified appropriately.","7.5.5"," Update any inaccurate personal information you hold to reflect the decision.",{"$f":"IF(ISBLANK('7. Age assurance'!E28),\"\",'7. Age assurance'!E28)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!F28),\"\",'7. Age assurance'!F28)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!G28),\"\",'7. Age assurance'!G28)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!H28),\"\",'7. Age assurance'!H28)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!I28),\"\",'7. Age assurance'!I28)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!J28),\"\",'7. Age assurance'!J28)","v":""}]
["Age assurance",7.6,"There are checks and contractual agreements in place with third-party provided age assurance solutions.","7.6.1","Carry out due diligence checks before using third-party age verification services to satisfy yourself that the level of certainty it confirms age with is sufficient (PAS standard 1296 ‘Online age checking’ may help with this). Also check that it complies with data protection requirements.",{"$f":"IF(ISBLANK('7. Age assurance'!E29),\"\",'7. Age assurance'!E29)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!F29),\"\",'7. Age assurance'!F29)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!G29),\"\",'7. Age assurance'!G29)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!H29),\"\",'7. Age assurance'!H29)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!I29),\"\",'7. Age assurance'!I29)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!J29),\"\",'7. Age assurance'!J29)","v":""}]
["Age assurance",{"$f":"B110","v":7.6},{"$f":"C110","v":"There are checks and contractual agreements in place with third-party provided age assurance solutions."},"7.6.2","Check that there are appropriate security measures in place to protect the confidentiality and integrity of personal information.",{"$f":"IF(ISBLANK('7. Age assurance'!E30),\"\",'7. Age assurance'!E30)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!F30),\"\",'7. Age assurance'!F30)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!G30),\"\",'7. Age assurance'!G30)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!H30),\"\",'7. Age assurance'!H30)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!I30),\"\",'7. Age assurance'!I30)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!J30),\"\",'7. Age assurance'!J30)","v":""}]
["Age assurance",7.6,"There are checks and contractual agreements in place with third-party provided age assurance solutions.","7.6.3","Check that there are appropriate measures in place to protect and enable people’s rights.",{"$f":"IF(ISBLANK('7. Age assurance'!E31),\"\",'7. Age assurance'!E31)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!F31),\"\",'7. Age assurance'!F31)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!G31),\"\",'7. Age assurance'!G31)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!H31),\"\",'7. Age assurance'!H31)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!I31),\"\",'7. Age assurance'!I31)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!J31),\"\",'7. Age assurance'!J31)","v":""}]
["Age assurance",7.6,"There are checks and contractual agreements in place with third-party provided age assurance solutions.","7.6.4","Ensure written contracts include all the details, terms and clauses required under the UK GDPR.",{"$f":"IF(ISBLANK('7. Age assurance'!E32),\"\",'7. Age assurance'!E32)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!F32),\"\",'7. Age assurance'!F32)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!G32),\"\",'7. Age assurance'!G32)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!H32),\"\",'7. Age assurance'!H32)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!I32),\"\",'7. Age assurance'!I32)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!J32),\"\",'7. Age assurance'!J32)","v":""}]
["Age assurance",7.7,"Where people are able to register for a service using a pre-existing identity created with a third party (such as allowing people to register using an existing social media or similar identity), there are processes in place to ensure that the age assurance carried out by the third party is sufficient to meet the requirements for the service being registered for. ","7.7.1","Carry out due diligence checks before using third-party age verification services to satisfy yourself that the level of certainty it confirms age with is sufficient (PAS standard 1296 ‘Online age checking’ may help with this). Also check that it complies with data protection requirements.",{"$f":"IF(ISBLANK('7. Age assurance'!E33),\"\",'7. Age assurance'!E33)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!F33),\"\",'7. Age assurance'!F33)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!G33),\"\",'7. Age assurance'!G33)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!H33),\"\",'7. Age assurance'!H33)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!I33),\"\",'7. Age assurance'!I33)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!J33),\"\",'7. Age assurance'!J33)","v":""}]
["Age assurance",{"$f":"B114","v":7.7},{"$f":"C114","v":"Where people are able to register for a service using a pre-existing identity created with a third party (such as allowing people to register using an existing social media or similar identity), there are processes in place to ensure that the age assurance carried out by the third party is sufficient to meet the requirements for the service being registered for. "},"7.7.2","Undertake periodic checks of the accuracy and effectiveness of the pre-existing identification to gain assurances that you can continue to rely on it.",{"$f":"IF(ISBLANK('7. Age assurance'!E34),\"\",'7. Age assurance'!E34)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!F34),\"\",'7. Age assurance'!F34)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!G34),\"\",'7. Age assurance'!G34)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!H34),\"\",'7. Age assurance'!H34)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!I34),\"\",'7. Age assurance'!I34)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!J34),\"\",'7. Age assurance'!J34)","v":""}]
["Age assurance",7.7,"Where people are able to register for a service using a pre-existing identity created with a third party (such as allowing people to register using an existing social media or similar identity), there are processes in place to ensure that the age assurance carried out by the third party is sufficient to meet the requirements for the service being registered for. ","7.7.3","Consider using additional age checks to confirm the accuracy of the pre-existing identification.",{"$f":"IF(ISBLANK('7. Age assurance'!E35),\"\",'7. Age assurance'!E35)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!F35),\"\",'7. Age assurance'!F35)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!G35),\"\",'7. Age assurance'!G35)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!H35),\"\",'7. Age assurance'!H35)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!I35),\"\",'7. Age assurance'!I35)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!J35),\"\",'7. Age assurance'!J35)","v":""}]
["Age assurance",7.8,"If the age of a user has not been established with the appropriate level of certainty, then the standards in the code have been applied to all users, as far as is relevant, in order to ensure appropriate protection.","7.8.1","Apply all the standards to all people if you have not carried out age assurance checks or they are insufficient. ",{"$f":"IF(ISBLANK('7. Age assurance'!E36),\"\",'7. Age assurance'!E36)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!F36),\"\",'7. Age assurance'!F36)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!G36),\"\",'7. Age assurance'!G36)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!H36),\"\",'7. Age assurance'!H36)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!I36),\"\",'7. Age assurance'!I36)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!J36),\"\",'7. Age assurance'!J36)","v":""}]
["Age assurance",{"$f":"B117","v":7.8},{"$f":"C117","v":"If the age of a user has not been established with the appropriate level of certainty, then the standards in the code have been applied to all users, as far as is relevant, in order to ensure appropriate protection."},"7.8.2","Implement measures to protect all users within the user journey, or in specific design features, if you are not sufficiently certain whether they are children. ",{"$f":"IF(ISBLANK('7. Age assurance'!E37),\"\",'7. Age assurance'!E37)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!F37),\"\",'7. Age assurance'!F37)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!G37),\"\",'7. Age assurance'!G37)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!H37),\"\",'7. Age assurance'!H37)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!I37),\"\",'7. Age assurance'!I37)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!J37),\"\",'7. Age assurance'!J37)","v":""}]
["Age assurance",7.8,"If the age of a user has not been established with the appropriate level of certainty, then the standards in the code have been applied to all users, as far as is relevant, in order to ensure appropriate protection.","7.8.3","Set the default privacy settings to high for all users.",{"$f":"IF(ISBLANK('7. Age assurance'!E38),\"\",'7. Age assurance'!E38)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!F38),\"\",'7. Age assurance'!F38)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!G38),\"\",'7. Age assurance'!G38)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!H38),\"\",'7. Age assurance'!H38)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!I38),\"\",'7. Age assurance'!I38)","v":""},{"$f":"IF(ISBLANK('7. Age assurance'!J38),\"\",'7. Age assurance'!J38)","v":""}]
["Detrimental use of children's information",8.1,"There are measures in place to ensure children’s information is not used to promote or market any services to them in a way that is obviously detrimental to their physical or mental health and wellbeing.","8.1.1","Limit the use of children’s personal information to what is essential for you to provide the main service.",{"$f":"IF(ISBLANK('8. Detrimental use of info'!E2),\"\",'8. Detrimental use of info'!E2)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!F2),\"\",'8. Detrimental use of info'!F2)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!G2),\"\",'8. Detrimental use of info'!G2)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!H2),\"\",'8. Detrimental use of info'!H2)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!I2),\"\",'8. Detrimental use of info'!I2)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!J2),\"\",'8. Detrimental use of info'!J2)","v":""}]
[{"$f":"A120","v":"Detrimental use of children's information"},{"$f":"B120","v":8.1},{"$f":"C120","v":"There are measures in place to ensure children’s information is not used to promote or market any services to them in a way that is obviously detrimental to their physical or mental health and wellbeing."},"8.1.2","Keep aware of relevant standards and industry codes of practice about children, including government advice on child welfare for digital or online services.",{"$f":"IF(ISBLANK('8. Detrimental use of info'!E3),\"\",'8. Detrimental use of info'!E3)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!F3),\"\",'8. Detrimental use of info'!F3)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!G3),\"\",'8. Detrimental use of info'!G3)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!H3),\"\",'8. Detrimental use of info'!H3)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!I3),\"\",'8. Detrimental use of info'!I3)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!J3),\"\",'8. Detrimental use of info'!J3)","v":""}]
["Detrimental use of children's information",8.1,"There are measures in place to ensure children’s information is not used to promote or market any services to them in a way that is obviously detrimental to their physical or mental health and wellbeing.","8.1.3","Review and check that there will be no detrimental effect on a child from any promotion of additional services (as a result of behavioural analytics or profiling of personal information).",{"$f":"IF(ISBLANK('8. Detrimental use of info'!E4),\"\",'8. Detrimental use of info'!E4)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!F4),\"\",'8. Detrimental use of info'!F4)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!G4),\"\",'8. Detrimental use of info'!G4)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!H4),\"\",'8. Detrimental use of info'!H4)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!I4),\"\",'8. Detrimental use of info'!I4)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!J4),\"\",'8. Detrimental use of info'!J4)","v":""}]
["Detrimental use of children's information",8.1,"There are measures in place to ensure children’s information is not used to promote or market any services to them in a way that is obviously detrimental to their physical or mental health and wellbeing.","8.1.4","Ensure that the child has to individually select and activate any optional uses of personal information that are designed to promote or market additional services.",{"$f":"IF(ISBLANK('8. Detrimental use of info'!E5),\"\",'8. Detrimental use of info'!E5)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!F5),\"\",'8. Detrimental use of info'!F5)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!G5),\"\",'8. Detrimental use of info'!G5)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!H5),\"\",'8. Detrimental use of info'!H5)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!I5),\"\",'8. Detrimental use of info'!I5)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!J5),\"\",'8. Detrimental use of info'!J5)","v":""}]
["Detrimental use of children's information",8.1,"There are measures in place to ensure children’s information is not used to promote or market any services to them in a way that is obviously detrimental to their physical or mental health and wellbeing.","8.1.5","Control when and where you encourage children to buy advertised products or persuade their parents or other adults to buy advertised products for them.",{"$f":"IF(ISBLANK('8. Detrimental use of info'!E6),\"\",'8. Detrimental use of info'!E6)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!F6),\"\",'8. Detrimental use of info'!F6)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!G6),\"\",'8. Detrimental use of info'!G6)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!H6),\"\",'8. Detrimental use of info'!H6)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!I6),\"\",'8. Detrimental use of info'!I6)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!J6),\"\",'8. Detrimental use of info'!J6)","v":""}]
["Detrimental use of children's information",8.1,"There are measures in place to ensure children’s information is not used to promote or market any services to them in a way that is obviously detrimental to their physical or mental health and wellbeing.","8.1.6","Ensure transparency for paid-for content and product placement.",{"$f":"IF(ISBLANK('8. Detrimental use of info'!E7),\"\",'8. Detrimental use of info'!E7)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!F7),\"\",'8. Detrimental use of info'!F7)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!G7),\"\",'8. Detrimental use of info'!G7)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!H7),\"\",'8. Detrimental use of info'!H7)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!I7),\"\",'8. Detrimental use of info'!I7)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!J7),\"\",'8. Detrimental use of info'!J7)","v":""}]
["Detrimental use of children's information",8.1,"There are measures in place to ensure children’s information is not used to promote or market any services to them in a way that is obviously detrimental to their physical or mental health and wellbeing.","8.1.7","Restrict user activation of any settings which allow third parties to use personal information, unless there is a compelling reason, taking into account the best interests of the child. ",{"$f":"IF(ISBLANK('8. Detrimental use of info'!E8),\"\",'8. Detrimental use of info'!E8)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!F8),\"\",'8. Detrimental use of info'!F8)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!G8),\"\",'8. Detrimental use of info'!G8)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!H8),\"\",'8. Detrimental use of info'!H8)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!I8),\"\",'8. Detrimental use of info'!I8)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!J8),\"\",'8. Detrimental use of info'!J8)","v":""}]
["Detrimental use of children's information",8.1999999999999993,"Where information is used to promote or personalise content feeds, the content is not obviously detrimental to the child or in breach of other regulatory restrictions or advice (eg Online Safety Act 2023 and advertising rules).","8.2.1","Review and check that there will be no detrimental effect on a child from any promotion of additional content (as a result of behavioural analytics or profiling of personal information).",{"$f":"IF(ISBLANK('8. Detrimental use of info'!E9),\"\",'8. Detrimental use of info'!E9)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!F9),\"\",'8. Detrimental use of info'!F9)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!G9),\"\",'8. Detrimental use of info'!G9)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!H9),\"\",'8. Detrimental use of info'!H9)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!I9),\"\",'8. Detrimental use of info'!I9)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!J9),\"\",'8. Detrimental use of info'!J9)","v":""}]
["Detrimental use of children's information",{"$f":"B127","v":8.1999999999999993},{"$f":"C127","v":"Where information is used to promote or personalise content feeds, the content is not obviously detrimental to the child or in breach of other regulatory restrictions or advice (eg Online Safety Act 2023 and advertising rules)."},"8.2.2","Complete checks before releasing personalised content to children to confirm that there will be no detrimental effects as a result of the personalisation.",{"$f":"IF(ISBLANK('8. Detrimental use of info'!E10),\"\",'8. Detrimental use of info'!E10)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!F10),\"\",'8. Detrimental use of info'!F10)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!G10),\"\",'8. Detrimental use of info'!G10)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!H10),\"\",'8. Detrimental use of info'!H10)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!I10),\"\",'8. Detrimental use of info'!I10)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!J10),\"\",'8. Detrimental use of info'!J10)","v":""}]
["Detrimental use of children's information",8.1999999999999993,"Where information is used to promote or personalise content feeds, the content is not obviously detrimental to the child or in breach of other regulatory restrictions or advice (eg Online Safety Act 2023 and advertising rules).","8.2.3","Conduct further analysis to determine whether the content will have a detrimental effect on certain user profiles or personal characteristics.",{"$f":"IF(ISBLANK('8. Detrimental use of info'!E11),\"\",'8. Detrimental use of info'!E11)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!F11),\"\",'8. Detrimental use of info'!F11)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!G11),\"\",'8. Detrimental use of info'!G11)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!H11),\"\",'8. Detrimental use of info'!H11)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!I11),\"\",'8. Detrimental use of info'!I11)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!J11),\"\",'8. Detrimental use of info'!J11)","v":""}]
["Detrimental use of children's information",8.1999999999999993,"Where information is used to promote or personalise content feeds, the content is not obviously detrimental to the child or in breach of other regulatory restrictions or advice (eg Online Safety Act 2023 and advertising rules).","8.2.4","Tailor the checks to take into account the various age groups of children and the differing effects the content may have, depending on the age of the child.",{"$f":"IF(ISBLANK('8. Detrimental use of info'!E12),\"\",'8. Detrimental use of info'!E12)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!F12),\"\",'8. Detrimental use of info'!F12)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!G12),\"\",'8. Detrimental use of info'!G12)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!H12),\"\",'8. Detrimental use of info'!H12)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!I12),\"\",'8. Detrimental use of info'!I12)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!J12),\"\",'8. Detrimental use of info'!J12)","v":""}]
["Detrimental use of children's information",8.1999999999999993,"Where information is used to promote or personalise content feeds, the content is not obviously detrimental to the child or in breach of other regulatory restrictions or advice (eg Online Safety Act 2023 and advertising rules).","8.2.5","Ensure that the child has to individually select and activate any optional uses of personal information that are designed to personalise the service.",{"$f":"IF(ISBLANK('8. Detrimental use of info'!E13),\"\",'8. Detrimental use of info'!E13)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!F13),\"\",'8. Detrimental use of info'!F13)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!G13),\"\",'8. Detrimental use of info'!G13)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!H13),\"\",'8. Detrimental use of info'!H13)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!I13),\"\",'8. Detrimental use of info'!I13)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!J13),\"\",'8. Detrimental use of info'!J13)","v":""}]
["Detrimental use of children's information",8.1999999999999993,"Where information is used to promote or personalise content feeds, the content is not obviously detrimental to the child or in breach of other regulatory restrictions or advice (eg Online Safety Act 2023 and advertising rules).","8.2.6","Present children with an easy way to report any unwanted, harmful or detrimental content.",{"$f":"IF(ISBLANK('8. Detrimental use of info'!E14),\"\",'8. Detrimental use of info'!E14)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!F14),\"\",'8. Detrimental use of info'!F14)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!G14),\"\",'8. Detrimental use of info'!G14)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!H14),\"\",'8. Detrimental use of info'!H14)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!I14),\"\",'8. Detrimental use of info'!I14)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!J14),\"\",'8. Detrimental use of info'!J14)","v":""}]
["Detrimental use of children's information",8.3000000000000007,"Strategies used to extend user engagement or encourage people to continue playing a game, watching video content or otherwise staying online, are not detrimental to a child's mental or physical wellbeing.","8.3.1","Implement prompts or informative messages supporting children to take breaks from extended or frequent engagement.",{"$f":"IF(ISBLANK('8. Detrimental use of info'!E15),\"\",'8. Detrimental use of info'!E15)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!F15),\"\",'8. Detrimental use of info'!F15)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!G15),\"\",'8. Detrimental use of info'!G15)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!H15),\"\",'8. Detrimental use of info'!H15)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!I15),\"\",'8. Detrimental use of info'!I15)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!J15),\"\",'8. Detrimental use of info'!J15)","v":""}]
["Detrimental use of children's information",{"$f":"B133","v":8.3000000000000007},{"$f":"C133","v":"Strategies used to extend user engagement or encourage people to continue playing a game, watching video content or otherwise staying online, are not detrimental to a child's mental or physical wellbeing."},"8.3.2","Review your online services regularly to remove addictive capabilities and discourage excessive engagement that may have arisen since you launched the service.",{"$f":"IF(ISBLANK('8. Detrimental use of info'!E16),\"\",'8. Detrimental use of info'!E16)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!F16),\"\",'8. Detrimental use of info'!F16)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!G16),\"\",'8. Detrimental use of info'!G16)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!H16),\"\",'8. Detrimental use of info'!H16)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!I16),\"\",'8. Detrimental use of info'!I16)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!J16),\"\",'8. Detrimental use of info'!J16)","v":""}]
["Detrimental use of children's information",8.3000000000000007,"Strategies used to extend user engagement or encourage people to continue playing a game, watching video content or otherwise staying online, are not detrimental to a child's mental or physical wellbeing.","8.3.3","Monitor the online activity of children and support children who engage excessively.",{"$f":"IF(ISBLANK('8. Detrimental use of info'!E17),\"\",'8. Detrimental use of info'!E17)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!F17),\"\",'8. Detrimental use of info'!F17)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!G17),\"\",'8. Detrimental use of info'!G17)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!H17),\"\",'8. Detrimental use of info'!H17)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!I17),\"\",'8. Detrimental use of info'!I17)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!J17),\"\",'8. Detrimental use of info'!J17)","v":""}]
["Detrimental use of children's information",8.3000000000000007,"Strategies used to extend user engagement or encourage people to continue playing a game, watching video content or otherwise staying online, are not detrimental to a child's mental or physical wellbeing.","8.3.4","Restrict push notifications that might encourage children to engage in an unhealthy way, such as overnight.",{"$f":"IF(ISBLANK('8. Detrimental use of info'!E18),\"\",'8. Detrimental use of info'!E18)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!F18),\"\",'8. Detrimental use of info'!F18)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!G18),\"\",'8. Detrimental use of info'!G18)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!H18),\"\",'8. Detrimental use of info'!H18)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!I18),\"\",'8. Detrimental use of info'!I18)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!J18),\"\",'8. Detrimental use of info'!J18)","v":""}]
["Detrimental use of children's information",8.3000000000000007,"Strategies used to extend user engagement or encourage people to continue playing a game, watching video content or otherwise staying online, are not detrimental to a child's mental or physical wellbeing.","8.3.5","Avoid applying penalties to children that disconnect during online sessions.",{"$f":"IF(ISBLANK('8. Detrimental use of info'!E19),\"\",'8. Detrimental use of info'!E19)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!F19),\"\",'8. Detrimental use of info'!F19)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!G19),\"\",'8. Detrimental use of info'!G19)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!H19),\"\",'8. Detrimental use of info'!H19)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!I19),\"\",'8. Detrimental use of info'!I19)","v":""},{"$f":"IF(ISBLANK('8. Detrimental use of info'!J19),\"\",'8. Detrimental use of info'!J19)","v":""}]
["Default privacy settings",9.1,"For services accessed, or likely to be accessed, by children, each processing activity is reviewed to determine whether it might pose a risk to children and then the default privacy setting is set to high privacy.","9.1.1","Set the default setting to 'high privacy' for direct and core processing of children’s information, unless there is a compelling reason for a different default setting, taking into account the best interests of the child.",{"$f":"IF(ISBLANK('9. Default privacy settings'!E2),\"\",'9. Default privacy settings'!E2)","v":""},{"$f":"IF(ISBLANK('9. Default privacy settings'!F2),\"\",'9. Default privacy settings'!F2)","v":""},{"$f":"IF(ISBLANK('9. Default privacy settings'!G2),\"\",'9. Default privacy settings'!G2)","v":""},{"$f":"IF(ISBLANK('9. Default privacy settings'!H2),\"\",'9. Default privacy settings'!H2)","v":""},{"$f":"IF(ISBLANK('9. Default privacy settings'!I2),\"\",'9. Default privacy settings'!I2)","v":""},{"$f":"IF(ISBLANK('9. Default privacy settings'!J2),\"\",'9. Default privacy settings'!J2)","v":""}]
[{"$f":"A138","v":"Default privacy settings"},{"$f":"B138","v":9.1},{"$f":"C138","v":"For services accessed, or likely to be accessed, by children, each processing activity is reviewed to determine whether it might pose a risk to children and then the default privacy setting is set to high privacy."},"9.1.2","Document the decision-making process, if you determine that some core processing for children does not require a high privacy setting (eg for safeguarding reasons).",{"$f":"IF(ISBLANK('9. Default privacy settings'!E3),\"\",'9. Default privacy settings'!E3)","v":""},{"$f":"IF(ISBLANK('9. Default privacy settings'!F3),\"\",'9. Default privacy settings'!F3)","v":""},{"$f":"IF(ISBLANK('9. Default privacy settings'!G3),\"\",'9. Default privacy settings'!G3)","v":""},{"$f":"IF(ISBLANK('9. Default privacy settings'!H3),\"\",'9. Default privacy settings'!H3)","v":""},{"$f":"IF(ISBLANK('9. Default privacy settings'!I3),\"\",'9. Default privacy settings'!I3)","v":""},{"$f":"IF(ISBLANK('9. Default privacy settings'!J3),\"\",'9. Default privacy settings'!J3)","v":""}]
["Default privacy settings",9.1,"For services accessed, or likely to be accessed, by children, each processing activity is reviewed to determine whether it might pose a risk to children and then the default privacy setting is set to high privacy.","9.1.3","Ensure children’s personal information is not visible or accessible to other people who use the service or third parties.",{"$f":"IF(ISBLANK('9. Default privacy settings'!E4),\"\",'9. Default privacy settings'!E4)","v":""},{"$f":"IF(ISBLANK('9. Default privacy settings'!F4),\"\",'9. Default privacy settings'!F4)","v":""},{"$f":"IF(ISBLANK('9. Default privacy settings'!G4),\"\",'9. Default privacy settings'!G4)","v":""},{"$f":"IF(ISBLANK('9. Default privacy settings'!H4),\"\",'9. Default privacy settings'!H4)","v":""},{"$f":"IF(ISBLANK('9. Default privacy settings'!I4),\"\",'9. Default privacy settings'!I4)","v":""},{"$f":"IF(ISBLANK('9. Default privacy settings'!J4),\"\",'9. Default privacy settings'!J4)","v":""}]
["Default privacy settings",9.1999999999999993,"There are measures in place to ensure that any user or system generated changes to privacy settings do not compromise children’s privacy.","9.2.1","If children do change their settings, ensure that they return to the high privacy defaults when they end the current session.  ",{"$f":"IF(ISBLANK('9. Default privacy settings'!E5),\"\",'9. Default privacy settings'!E5)","v":""},{"$f":"IF(ISBLANK('9. Default privacy settings'!F5),\"\",'9. Default privacy settings'!F5)","v":""},{"$f":"IF(ISBLANK('9. Default privacy settings'!G5),\"\",'9. Default privacy settings'!G5)","v":""},{"$f":"IF(ISBLANK('9. Default privacy settings'!H5),\"\",'9. Default privacy settings'!H5)","v":""},{"$f":"IF(ISBLANK('9. Default privacy settings'!I5),\"\",'9. Default privacy settings'!I5)","v":""},{"$f":"IF(ISBLANK('9. Default privacy settings'!J5),\"\",'9. Default privacy settings'!J5)","v":""}]
["Default privacy settings",{"$f":"B141","v":9.1999999999999993},{"$f":"C141","v":"There are measures in place to ensure that any user or system generated changes to privacy settings do not compromise children’s privacy."},"9.2.2","Provide children with age-appropriate explanations and prompts at the point they attempt to change any privacy settings.",{"$f":"IF(ISBLANK('9. Default privacy settings'!E6),\"\",'9. Default privacy settings'!E6)","v":""},{"$f":"IF(ISBLANK('9. Default privacy settings'!F6),\"\",'9. Default privacy settings'!F6)","v":""},{"$f":"IF(ISBLANK('9. Default privacy settings'!G6),\"\",'9. Default privacy settings'!G6)","v":""},{"$f":"IF(ISBLANK('9. Default privacy settings'!H6),\"\",'9. Default privacy settings'!H6)","v":""},{"$f":"IF(ISBLANK('9. Default privacy settings'!I6),\"\",'9. Default privacy settings'!I6)","v":""},{"$f":"IF(ISBLANK('9. Default privacy settings'!J6),\"\",'9. Default privacy settings'!J6)","v":""}]
["Default privacy settings",9.1999999999999993,"There are measures in place to ensure that any user or system generated changes to privacy settings do not compromise children’s privacy.","9.2.3","If settings are changed, ensure that age-appropriate content and ads are still served.",{"$f":"IF(ISBLANK('9. Default privacy settings'!E7),\"\",'9. Default privacy settings'!E7)","v":""},{"$f":"IF(ISBLANK('9. Default privacy settings'!F7),\"\",'9. Default privacy settings'!F7)","v":""},{"$f":"IF(ISBLANK('9. Default privacy settings'!G7),\"\",'9. Default privacy settings'!G7)","v":""},{"$f":"IF(ISBLANK('9. Default privacy settings'!H7),\"\",'9. Default privacy settings'!H7)","v":""},{"$f":"IF(ISBLANK('9. Default privacy settings'!I7),\"\",'9. Default privacy settings'!I7)","v":""},{"$f":"IF(ISBLANK('9. Default privacy settings'!J7),\"\",'9. Default privacy settings'!J7)","v":""}]
["Default privacy settings",9.1999999999999993,"There are measures in place to ensure that any user or system generated changes to privacy settings do not compromise children’s privacy.","9.2.4","Implement measures to retain any privacy settings that children have applied following a software update, an update to security measures or an introduction of new features.",{"$f":"IF(ISBLANK('9. Default privacy settings'!E8),\"\",'9. Default privacy settings'!E8)","v":""},{"$f":"IF(ISBLANK('9. Default privacy settings'!F8),\"\",'9. Default privacy settings'!F8)","v":""},{"$f":"IF(ISBLANK('9. Default privacy settings'!G8),\"\",'9. Default privacy settings'!G8)","v":""},{"$f":"IF(ISBLANK('9. Default privacy settings'!H8),\"\",'9. Default privacy settings'!H8)","v":""},{"$f":"IF(ISBLANK('9. Default privacy settings'!I8),\"\",'9. Default privacy settings'!I8)","v":""},{"$f":"IF(ISBLANK('9. Default privacy settings'!J8),\"\",'9. Default privacy settings'!J8)","v":""}]
["Default privacy settings",9.1999999999999993,"There are measures in place to ensure that any user or system generated changes to privacy settings do not compromise children’s privacy.","9.2.5","Allow children to set up their own profiles with their own individual privacy settings if your online service allows multiple people to access the service from one device.",{"$f":"IF(ISBLANK('9. Default privacy settings'!E9),\"\",'9. Default privacy settings'!E9)","v":""},{"$f":"IF(ISBLANK('9. Default privacy settings'!F9),\"\",'9. Default privacy settings'!F9)","v":""},{"$f":"IF(ISBLANK('9. Default privacy settings'!G9),\"\",'9. Default privacy settings'!G9)","v":""},{"$f":"IF(ISBLANK('9. Default privacy settings'!H9),\"\",'9. Default privacy settings'!H9)","v":""},{"$f":"IF(ISBLANK('9. Default privacy settings'!I9),\"\",'9. Default privacy settings'!I9)","v":""},{"$f":"IF(ISBLANK('9. Default privacy settings'!J9),\"\",'9. Default privacy settings'!J9)","v":""}]
["Default privacy settings",9.1999999999999993,"There are measures in place to ensure that any user or system generated changes to privacy settings do not compromise children’s privacy.","9.2.6","Ensure children can access and check profiles easily. ",{"$f":"IF(ISBLANK('9. Default privacy settings'!E10),\"\",'9. Default privacy settings'!E10)","v":""},{"$f":"IF(ISBLANK('9. Default privacy settings'!F10),\"\",'9. Default privacy settings'!F10)","v":""},{"$f":"IF(ISBLANK('9. Default privacy settings'!G10),\"\",'9. Default privacy settings'!G10)","v":""},{"$f":"IF(ISBLANK('9. Default privacy settings'!H10),\"\",'9. Default privacy settings'!H10)","v":""},{"$f":"IF(ISBLANK('9. Default privacy settings'!I10),\"\",'9. Default privacy settings'!I10)","v":""},{"$f":"IF(ISBLANK('9. Default privacy settings'!J10),\"\",'9. Default privacy settings'!J10)","v":""}]
["Parental controls",10.1,"There are parental controls in place to allow parents or guardians to place limits on a child’s online activity.","10.1.1","Include options to set time limits or bedtimes, restrict internet access to pre-approved sites or services only, and restrict in-app purchases. ",{"$f":"IF(ISBLANK('10. Parental controls'!E2),\"\",'10. Parental controls'!E2)","v":""},{"$f":"IF(ISBLANK('10. Parental controls'!F2),\"\",'10. Parental controls'!F2)","v":""},{"$f":"IF(ISBLANK('10. Parental controls'!G2),\"\",'10. Parental controls'!G2)","v":""},{"$f":"IF(ISBLANK('10. Parental controls'!H2),\"\",'10. Parental controls'!H2)","v":""},{"$f":"IF(ISBLANK('10. Parental controls'!I2),\"\",'10. Parental controls'!I2)","v":""},{"$f":"IF(ISBLANK('10. Parental controls'!J2),\"\",'10. Parental controls'!J2)","v":""}]
[{"$f":"A147","v":"Parental controls"},{"$f":"B147","v":10.1},{"$f":"C147","v":"There are parental controls in place to allow parents or guardians to place limits on a child’s online activity."},"10.1.2","Provide resources to help parents explain the service to their child and discuss privacy with them.",{"$f":"IF(ISBLANK('10. Parental controls'!E3),\"\",'10. Parental controls'!E3)","v":""},{"$f":"IF(ISBLANK('10. Parental controls'!F3),\"\",'10. Parental controls'!F3)","v":""},{"$f":"IF(ISBLANK('10. Parental controls'!G3),\"\",'10. Parental controls'!G3)","v":""},{"$f":"IF(ISBLANK('10. Parental controls'!H3),\"\",'10. Parental controls'!H3)","v":""},{"$f":"IF(ISBLANK('10. Parental controls'!I3),\"\",'10. Parental controls'!I3)","v":""},{"$f":"IF(ISBLANK('10. Parental controls'!J3),\"\",'10. Parental controls'!J3)","v":""}]
["Parental controls",10.1,"There are parental controls in place to allow parents or guardians to place limits on a child’s online activity.","10.1.3","Provide resources to support age-appropriate discussion between a parent and child about potential online threats and harms.",{"$f":"IF(ISBLANK('10. Parental controls'!E4),\"\",'10. Parental controls'!E4)","v":""},{"$f":"IF(ISBLANK('10. Parental controls'!F4),\"\",'10. Parental controls'!F4)","v":""},{"$f":"IF(ISBLANK('10. Parental controls'!G4),\"\",'10. Parental controls'!G4)","v":""},{"$f":"IF(ISBLANK('10. Parental controls'!H4),\"\",'10. Parental controls'!H4)","v":""},{"$f":"IF(ISBLANK('10. Parental controls'!I4),\"\",'10. Parental controls'!I4)","v":""},{"$f":"IF(ISBLANK('10. Parental controls'!J4),\"\",'10. Parental controls'!J4)","v":""}]
["Parental controls",10.1,"There are parental controls in place to allow parents or guardians to place limits on a child’s online activity.","10.1.4","Provide easy access to information to help parents monitor the effectiveness of controls they have set.",{"$f":"IF(ISBLANK('10. Parental controls'!E5),\"\",'10. Parental controls'!E5)","v":""},{"$f":"IF(ISBLANK('10. Parental controls'!F5),\"\",'10. Parental controls'!F5)","v":""},{"$f":"IF(ISBLANK('10. Parental controls'!G5),\"\",'10. Parental controls'!G5)","v":""},{"$f":"IF(ISBLANK('10. Parental controls'!H5),\"\",'10. Parental controls'!H5)","v":""},{"$f":"IF(ISBLANK('10. Parental controls'!I5),\"\",'10. Parental controls'!I5)","v":""},{"$f":"IF(ISBLANK('10. Parental controls'!J5),\"\",'10. Parental controls'!J5)","v":""}]
["Parental controls",10.1,"There are parental controls in place to allow parents or guardians to place limits on a child’s online activity.","10.1.5","Ensure parental controls are easy to set up and manage.",{"$f":"IF(ISBLANK('10. Parental controls'!E6),\"\",'10. Parental controls'!E6)","v":""},{"$f":"IF(ISBLANK('10. Parental controls'!F6),\"\",'10. Parental controls'!F6)","v":""},{"$f":"IF(ISBLANK('10. Parental controls'!G6),\"\",'10. Parental controls'!G6)","v":""},{"$f":"IF(ISBLANK('10. Parental controls'!H6),\"\",'10. Parental controls'!H6)","v":""},{"$f":"IF(ISBLANK('10. Parental controls'!I6),\"\",'10. Parental controls'!I6)","v":""},{"$f":"IF(ISBLANK('10. Parental controls'!J6),\"\",'10. Parental controls'!J6)","v":""}]
["Parental controls",10.199999999999999,"Age-appropriate information is provided to tell the child that parental controls are in place and monitoring or tracking is active.","10.2.1","Provide children with age-appropriate resources so that they are aware that their activity is being monitored by their parents or their location tracked.",{"$f":"IF(ISBLANK('10. Parental controls'!E7),\"\",'10. Parental controls'!E7)","v":""},{"$f":"IF(ISBLANK('10. Parental controls'!F7),\"\",'10. Parental controls'!F7)","v":""},{"$f":"IF(ISBLANK('10. Parental controls'!G7),\"\",'10. Parental controls'!G7)","v":""},{"$f":"IF(ISBLANK('10. Parental controls'!H7),\"\",'10. Parental controls'!H7)","v":""},{"$f":"IF(ISBLANK('10. Parental controls'!I7),\"\",'10. Parental controls'!I7)","v":""},{"$f":"IF(ISBLANK('10. Parental controls'!J7),\"\",'10. Parental controls'!J7)","v":""}]
["Parental controls",{"$f":"B152","v":10.199999999999999},{"$f":"C152","v":"Age-appropriate information is provided to tell the child that parental controls are in place and monitoring or tracking is active."},"10.2.2","Monitor and stress test the controls regularly to ensure they remain fit for purpose while still protecting children’s rights and freedoms.",{"$f":"IF(ISBLANK('10. Parental controls'!E8),\"\",'10. Parental controls'!E8)","v":""},{"$f":"IF(ISBLANK('10. Parental controls'!F8),\"\",'10. Parental controls'!F8)","v":""},{"$f":"IF(ISBLANK('10. Parental controls'!G8),\"\",'10. Parental controls'!G8)","v":""},{"$f":"IF(ISBLANK('10. Parental controls'!H8),\"\",'10. Parental controls'!H8)","v":""},{"$f":"IF(ISBLANK('10. Parental controls'!I8),\"\",'10. Parental controls'!I8)","v":""},{"$f":"IF(ISBLANK('10. Parental controls'!J8),\"\",'10. Parental controls'!J8)","v":""}]
["Parental controls",10.199999999999999,"Age-appropriate information is provided to tell the child that parental controls are in place and monitoring or tracking is active.","10.2.3","Present children with a clear and obvious sign when parental controls are active (eg a lit up icon).",{"$f":"IF(ISBLANK('10. Parental controls'!E9),\"\",'10. Parental controls'!E9)","v":""},{"$f":"IF(ISBLANK('10. Parental controls'!F9),\"\",'10. Parental controls'!F9)","v":""},{"$f":"IF(ISBLANK('10. Parental controls'!G9),\"\",'10. Parental controls'!G9)","v":""},{"$f":"IF(ISBLANK('10. Parental controls'!H9),\"\",'10. Parental controls'!H9)","v":""},{"$f":"IF(ISBLANK('10. Parental controls'!I9),\"\",'10. Parental controls'!I9)","v":""},{"$f":"IF(ISBLANK('10. Parental controls'!J9),\"\",'10. Parental controls'!J9)","v":""}]
["Geolocation data",11.1,"There are appropriate measures in place to provide transparency to children around the use of their geolocation data.","11.1.1","Provide children with information, at the point of sign-up, and each time the service is accessed to: \n- \talert them to the use of geolocation data; and \n- \tprompt them to discuss this with a trusted adult, if they don’t understand what it means.",{"$f":"IF(ISBLANK('11. Geolocation data'!E2),\"\",'11. Geolocation data'!E2)","v":""},{"$f":"IF(ISBLANK('11. Geolocation data'!F2),\"\",'11. Geolocation data'!F2)","v":""},{"$f":"IF(ISBLANK('11. Geolocation data'!G2),\"\",'11. Geolocation data'!G2)","v":""},{"$f":"IF(ISBLANK('11. Geolocation data'!H2),\"\",'11. Geolocation data'!H2)","v":""},{"$f":"IF(ISBLANK('11. Geolocation data'!I2),\"\",'11. Geolocation data'!I2)","v":""},{"$f":"IF(ISBLANK('11. Geolocation data'!J2),\"\",'11. Geolocation data'!J2)","v":""}]
[{"$f":"A155","v":"Geolocation data"},{"$f":"B155","v":11.1},{"$f":"C155","v":"There are appropriate measures in place to provide transparency to children around the use of their geolocation data."},"11.1.2","Provide children with a clear indication of when their location is and isn’t being tracked (eg by use of a clear symbol visible to the child). This ensures location tracking can’t be turned on, or left on, inadvertently or by mistake.",{"$f":"IF(ISBLANK('11. Geolocation data'!E3),\"\",'11. Geolocation data'!E3)","v":""},{"$f":"IF(ISBLANK('11. Geolocation data'!F3),\"\",'11. Geolocation data'!F3)","v":""},{"$f":"IF(ISBLANK('11. Geolocation data'!G3),\"\",'11. Geolocation data'!G3)","v":""},{"$f":"IF(ISBLANK('11. Geolocation data'!H3),\"\",'11. Geolocation data'!H3)","v":""},{"$f":"IF(ISBLANK('11. Geolocation data'!I3),\"\",'11. Geolocation data'!I3)","v":""},{"$f":"IF(ISBLANK('11. Geolocation data'!J3),\"\",'11. Geolocation data'!J3)","v":""}]
["Geolocation data",11.2,"Where geolocation tracking is necessary, there is an assessment to determine at what level of granularity a child's location needs to be tracked to provide each element of the service.","11.2.1","Assess whether geolocation tracking is essential to provide children with your service.",{"$f":"IF(ISBLANK('11. Geolocation data'!E4),\"\",'11. Geolocation data'!E4)","v":""},{"$f":"IF(ISBLANK('11. Geolocation data'!F4),\"\",'11. Geolocation data'!F4)","v":""},{"$f":"IF(ISBLANK('11. Geolocation data'!G4),\"\",'11. Geolocation data'!G4)","v":""},{"$f":"IF(ISBLANK('11. Geolocation data'!H4),\"\",'11. Geolocation data'!H4)","v":""},{"$f":"IF(ISBLANK('11. Geolocation data'!I4),\"\",'11. Geolocation data'!I4)","v":""},{"$f":"IF(ISBLANK('11. Geolocation data'!J4),\"\",'11. Geolocation data'!J4)","v":""}]
["Geolocation data",{"$f":"B157","v":11.2},{"$f":"C157","v":"Where geolocation tracking is necessary, there is an assessment to determine at what level of granularity a child's location needs to be tracked to provide each element of the service."},"11.2.2","Offer children different settings for different levels of service, if appropriate.",{"$f":"IF(ISBLANK('11. Geolocation data'!E5),\"\",'11. Geolocation data'!E5)","v":""},{"$f":"IF(ISBLANK('11. Geolocation data'!F5),\"\",'11. Geolocation data'!F5)","v":""},{"$f":"IF(ISBLANK('11. Geolocation data'!G5),\"\",'11. Geolocation data'!G5)","v":""},{"$f":"IF(ISBLANK('11. Geolocation data'!H5),\"\",'11. Geolocation data'!H5)","v":""},{"$f":"IF(ISBLANK('11. Geolocation data'!I5),\"\",'11. Geolocation data'!I5)","v":""},{"$f":"IF(ISBLANK('11. Geolocation data'!J5),\"\",'11. Geolocation data'!J5)","v":""}]
["Geolocation data",11.2,"Where geolocation tracking is necessary, there is an assessment to determine at what level of granularity a child's location needs to be tracked to provide each element of the service.","11.2.3","Apply high privacy settings to any geolocation services that go over and above the core service.",{"$f":"IF(ISBLANK('11. Geolocation data'!E6),\"\",'11. Geolocation data'!E6)","v":""},{"$f":"IF(ISBLANK('11. Geolocation data'!F6),\"\",'11. Geolocation data'!F6)","v":""},{"$f":"IF(ISBLANK('11. Geolocation data'!G6),\"\",'11. Geolocation data'!G6)","v":""},{"$f":"IF(ISBLANK('11. Geolocation data'!H6),\"\",'11. Geolocation data'!H6)","v":""},{"$f":"IF(ISBLANK('11. Geolocation data'!I6),\"\",'11. Geolocation data'!I6)","v":""},{"$f":"IF(ISBLANK('11. Geolocation data'!J6),\"\",'11. Geolocation data'!J6)","v":""}]
["Geolocation data",11.2,"Where geolocation tracking is necessary, there is an assessment to determine at what level of granularity a child's location needs to be tracked to provide each element of the service.","11.2.4","Switch ‘off by default’ any geolocation data collection settings. Ensure children have to actively change the default setting to allow their geolocation data to be used.",{"$f":"IF(ISBLANK('11. Geolocation data'!E7),\"\",'11. Geolocation data'!E7)","v":""},{"$f":"IF(ISBLANK('11. Geolocation data'!F7),\"\",'11. Geolocation data'!F7)","v":""},{"$f":"IF(ISBLANK('11. Geolocation data'!G7),\"\",'11. Geolocation data'!G7)","v":""},{"$f":"IF(ISBLANK('11. Geolocation data'!H7),\"\",'11. Geolocation data'!H7)","v":""},{"$f":"IF(ISBLANK('11. Geolocation data'!I7),\"\",'11. Geolocation data'!I7)","v":""},{"$f":"IF(ISBLANK('11. Geolocation data'!J7),\"\",'11. Geolocation data'!J7)","v":""}]
["Geolocation data",11.2,"Where geolocation tracking is necessary, there is an assessment to determine at what level of granularity a child's location needs to be tracked to provide each element of the service.","11.2.5","Apply a privacy setting to any option that makes the child’s location visible to others.",{"$f":"IF(ISBLANK('11. Geolocation data'!E8),\"\",'11. Geolocation data'!E8)","v":""},{"$f":"IF(ISBLANK('11. Geolocation data'!F8),\"\",'11. Geolocation data'!F8)","v":""},{"$f":"IF(ISBLANK('11. Geolocation data'!G8),\"\",'11. Geolocation data'!G8)","v":""},{"$f":"IF(ISBLANK('11. Geolocation data'!H8),\"\",'11. Geolocation data'!H8)","v":""},{"$f":"IF(ISBLANK('11. Geolocation data'!I8),\"\",'11. Geolocation data'!I8)","v":""},{"$f":"IF(ISBLANK('11. Geolocation data'!J8),\"\",'11. Geolocation data'!J8)","v":""}]
["Geolocation data",11.2,"Where geolocation tracking is necessary, there is an assessment to determine at what level of granularity a child's location needs to be tracked to provide each element of the service.","11.2.6","Ensure you meet PECR requirements, if the geolocation data you are processing also meets the definition of ‘location data’ in PECR.",{"$f":"IF(ISBLANK('11. Geolocation data'!E9),\"\",'11. Geolocation data'!E9)","v":""},{"$f":"IF(ISBLANK('11. Geolocation data'!F9),\"\",'11. Geolocation data'!F9)","v":""},{"$f":"IF(ISBLANK('11. Geolocation data'!G9),\"\",'11. Geolocation data'!G9)","v":""},{"$f":"IF(ISBLANK('11. Geolocation data'!H9),\"\",'11. Geolocation data'!H9)","v":""},{"$f":"IF(ISBLANK('11. Geolocation data'!I9),\"\",'11. Geolocation data'!I9)","v":""},{"$f":"IF(ISBLANK('11. Geolocation data'!J9),\"\",'11. Geolocation data'!J9)","v":""}]
["Profiling",12.1,"The privacy risks for children are considered before any profiling activities.","12.1.1","Assess whether profiling is essential to provide children with the service.",{"$f":"IF(ISBLANK('12. Profiling'!E2),\"\",'12. Profiling'!E2)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!F2),\"\",'12. Profiling'!F2)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!G2),\"\",'12. Profiling'!G2)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!H2),\"\",'12. Profiling'!H2)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!I2),\"\",'12. Profiling'!I2)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!J2),\"\",'12. Profiling'!J2)","v":""}]
[{"$f":"A163","v":"Profiling"},{"$f":"B163","v":12.1},{"$f":"C163","v":"The privacy risks for children are considered before any profiling activities."},"12.1.2","Assess the impact to children's rights and freedoms of the profiling activities that are essential for you to provide your core service.",{"$f":"IF(ISBLANK('12. Profiling'!E3),\"\",'12. Profiling'!E3)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!F3),\"\",'12. Profiling'!F3)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!G3),\"\",'12. Profiling'!G3)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!H3),\"\",'12. Profiling'!H3)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!I3),\"\",'12. Profiling'!I3)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!J3),\"\",'12. Profiling'!J3)","v":""}]
["Profiling",12.1,"The privacy risks for children are considered before any profiling activities.","12.1.3","Apply privacy settings that are 'on by default’ for all non-essential profiling.",{"$f":"IF(ISBLANK('12. Profiling'!E4),\"\",'12. Profiling'!E4)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!F4),\"\",'12. Profiling'!F4)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!G4),\"\",'12. Profiling'!G4)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!H4),\"\",'12. Profiling'!H4)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!I4),\"\",'12. Profiling'!I4)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!J4),\"\",'12. Profiling'!J4)","v":""}]
["Profiling",12.2,"Age-appropriate information is provided at the point any profiling options are turned on to inform children what will happen to their personal information and highlight any risks inherent in that processing.","12.2.1","Give age appropriate and timely information about the processing at the point that profiling takes place.",{"$f":"IF(ISBLANK('12. Profiling'!E5),\"\",'12. Profiling'!E5)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!F5),\"\",'12. Profiling'!F5)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!G5),\"\",'12. Profiling'!G5)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!H5),\"\",'12. Profiling'!H5)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!I5),\"\",'12. Profiling'!I5)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!J5),\"\",'12. Profiling'!J5)","v":""}]
["Profiling",{"$f":"B166","v":12.2},{"$f":"C166","v":"Age-appropriate information is provided at the point any profiling options are turned on to inform children what will happen to their personal information and highlight any risks inherent in that processing."},"12.2.2"," Assess whether you need any additional age assurance measures, (eg depending on the age range of the child, at the point at which profiling is enabled).",{"$f":"IF(ISBLANK('12. Profiling'!E6),\"\",'12. Profiling'!E6)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!F6),\"\",'12. Profiling'!F6)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!G6),\"\",'12. Profiling'!G6)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!H6),\"\",'12. Profiling'!H6)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!I6),\"\",'12. Profiling'!I6)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!J6),\"\",'12. Profiling'!J6)","v":""}]
["Profiling",12.2,"Age-appropriate information is provided at the point any profiling options are turned on to inform children what will happen to their personal information and highlight any risks inherent in that processing.","12.2.3","Apply separate privacy settings for each different type of profiling. Do not bundle different types of profiling together under one privacy setting.",{"$f":"IF(ISBLANK('12. Profiling'!E7),\"\",'12. Profiling'!E7)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!F7),\"\",'12. Profiling'!F7)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!G7),\"\",'12. Profiling'!G7)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!H7),\"\",'12. Profiling'!H7)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!I7),\"\",'12. Profiling'!I7)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!J7),\"\",'12. Profiling'!J7)","v":""}]
["Profiling",12.2,"Age-appropriate information is provided at the point any profiling options are turned on to inform children what will happen to their personal information and highlight any risks inherent in that processing.","12.2.4","Apply a separate privacy setting for any behavioural advertising, except if this is your core service.",{"$f":"IF(ISBLANK('12. Profiling'!E8),\"\",'12. Profiling'!E8)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!F8),\"\",'12. Profiling'!F8)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!G8),\"\",'12. Profiling'!G8)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!H8),\"\",'12. Profiling'!H8)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!I8),\"\",'12. Profiling'!I8)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!J8),\"\",'12. Profiling'!J8)","v":""}]
["Profiling",12.2,"Age-appropriate information is provided at the point any profiling options are turned on to inform children what will happen to their personal information and highlight any risks inherent in that processing.","12.2.5","Provide age-appropriate prompts to children to seek assistance from an adult and not to activate the profiling, if they are uncertain or don’t understand.",{"$f":"IF(ISBLANK('12. Profiling'!E9),\"\",'12. Profiling'!E9)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!F9),\"\",'12. Profiling'!F9)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!G9),\"\",'12. Profiling'!G9)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!H9),\"\",'12. Profiling'!H9)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!I9),\"\",'12. Profiling'!I9)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!J9),\"\",'12. Profiling'!J9)","v":""}]
["Profiling",12.3,"Profiling is only undertaken when there are appropriate measures in place to protect the child from any harmful effects (in particular, when being fed online content or behavioural advertising that is detrimental to their health or wellbeing).","12.3.1","Implement measures such as contextual tagging, robust user reporting procedures, and elements of human moderation to your service.",{"$f":"IF(ISBLANK('12. Profiling'!E10),\"\",'12. Profiling'!E10)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!F10),\"\",'12. Profiling'!F10)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!G10),\"\",'12. Profiling'!G10)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!H10),\"\",'12. Profiling'!H10)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!I10),\"\",'12. Profiling'!I10)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!J10),\"\",'12. Profiling'!J10)","v":""}]
["Profiling",{"$f":"B171","v":12.3},{"$f":"C171","v":"Profiling is only undertaken when there are appropriate measures in place to protect the child from any harmful effects (in particular, when being fed online content or behavioural advertising that is detrimental to their health or wellbeing)."},"12.3.2","Continuously review new content streams or services, and the materials being suggested or provided, to ensure they remain age appropriate. ",{"$f":"IF(ISBLANK('12. Profiling'!E11),\"\",'12. Profiling'!E11)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!F11),\"\",'12. Profiling'!F11)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!G11),\"\",'12. Profiling'!G11)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!H11),\"\",'12. Profiling'!H11)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!I11),\"\",'12. Profiling'!I11)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!J11),\"\",'12. Profiling'!J11)","v":""}]
["Profiling",12.3,"Profiling is only undertaken when there are appropriate measures in place to protect the child from any harmful effects (in particular, when being fed online content or behavioural advertising that is detrimental to their health or wellbeing).","12.3.3","Apply editorial controls over the content being displayed when profiling is done about what further online content to suggest to children. ",{"$f":"IF(ISBLANK('12. Profiling'!E12),\"\",'12. Profiling'!E12)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!F12),\"\",'12. Profiling'!F12)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!G12),\"\",'12. Profiling'!G12)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!H12),\"\",'12. Profiling'!H12)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!I12),\"\",'12. Profiling'!I12)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!J12),\"\",'12. Profiling'!J12)","v":""}]
["Profiling",12.3,"Profiling is only undertaken when there are appropriate measures in place to protect the child from any harmful effects (in particular, when being fed online content or behavioural advertising that is detrimental to their health or wellbeing).","12.3.4","Operate a valid consent ‘opt in’ (for children under 13, from the parent or holder of parental responsibility) for any profiling you do for behavioural advertising that is not part of the core service that the child wishes to access.",{"$f":"IF(ISBLANK('12. Profiling'!E13),\"\",'12. Profiling'!E13)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!F13),\"\",'12. Profiling'!F13)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!G13),\"\",'12. Profiling'!G13)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!H13),\"\",'12. Profiling'!H13)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!I13),\"\",'12. Profiling'!I13)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!J13),\"\",'12. Profiling'!J13)","v":""}]
["Profiling",12.3,"Profiling is only undertaken when there are appropriate measures in place to protect the child from any harmful effects (in particular, when being fed online content or behavioural advertising that is detrimental to their health or wellbeing).","12.3.5","Ensure that if you collect a child's personal information for one purpose, you do not use it for another, following profiling activities. ",{"$f":"IF(ISBLANK('12. Profiling'!E14),\"\",'12. Profiling'!E14)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!F14),\"\",'12. Profiling'!F14)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!G14),\"\",'12. Profiling'!G14)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!H14),\"\",'12. Profiling'!H14)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!I14),\"\",'12. Profiling'!I14)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!J14),\"\",'12. Profiling'!J14)","v":""}]
["Profiling",12.4,"Where cookies are used for the purposes of profiling children, PECR rules are considered for the cookie setting. The profiling activities that the cookie supports or enables comply with the UK GDPR and the code.","12.4.1","Consider whether the cookie is for essential or non-essential processing. Apply an appropriate privacy setting, if the cookie isn’t essential to provide the service that the child wants to access.",{"$f":"IF(ISBLANK('12. Profiling'!E15),\"\",'12. Profiling'!E15)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!F15),\"\",'12. Profiling'!F15)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!G15),\"\",'12. Profiling'!G15)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!H15),\"\",'12. Profiling'!H15)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!I15),\"\",'12. Profiling'!I15)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!J15),\"\",'12. Profiling'!J15)","v":""}]
["Profiling",{"$f":"B176","v":12.4},{"$f":"C176","v":"Where cookies are used for the purposes of profiling children, PECR rules are considered for the cookie setting. The profiling activities that the cookie supports or enables comply with the UK GDPR and the code."},"12.4.2","Keep evidenced consent for the cookie, as well as a UK GDPR lawful basis for processing (in practice this may also be consent).",{"$f":"IF(ISBLANK('12. Profiling'!E16),\"\",'12. Profiling'!E16)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!F16),\"\",'12. Profiling'!F16)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!G16),\"\",'12. Profiling'!G16)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!H16),\"\",'12. Profiling'!H16)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!I16),\"\",'12. Profiling'!I16)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!J16),\"\",'12. Profiling'!J16)","v":""}]
["Profiling",12.4,"Where cookies are used for the purposes of profiling children, PECR rules are considered for the cookie setting. The profiling activities that the cookie supports or enables comply with the UK GDPR and the code.","12.4.3","Evidence that the cookies you use for age estimation or age assurance are essential for your service. If you use the cookie  solely for this purpose,  then the child does not need to consent to the cookie.",{"$f":"IF(ISBLANK('12. Profiling'!E17),\"\",'12. Profiling'!E17)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!F17),\"\",'12. Profiling'!F17)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!G17),\"\",'12. Profiling'!G17)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!H17),\"\",'12. Profiling'!H17)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!I17),\"\",'12. Profiling'!I17)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!J17),\"\",'12. Profiling'!J17)","v":""}]
["Profiling",12.4,"Where cookies are used for the purposes of profiling children, PECR rules are considered for the cookie setting. The profiling activities that the cookie supports or enables comply with the UK GDPR and the code.","12.4.4","Provide transparency information if you use non-essential cookies to track user interaction.",{"$f":"IF(ISBLANK('12. Profiling'!E18),\"\",'12. Profiling'!E18)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!F18),\"\",'12. Profiling'!F18)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!G18),\"\",'12. Profiling'!G18)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!H18),\"\",'12. Profiling'!H18)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!I18),\"\",'12. Profiling'!I18)","v":""},{"$f":"IF(ISBLANK('12. Profiling'!J18),\"\",'12. Profiling'!J18)","v":""}]
["Nudge techniques",13.1,"Children are not led or encouraged to provide unnecessary personal information or turn off privacy protections.","13.1.1","Ensure design features do not lead or encourage children to follow your designer’s preferred paths, prompt them to disclose additional personal information, or turn off privacy settings.",{"$f":"IF(ISBLANK('13. Nudge techniques'!E2),\"\",'13. Nudge techniques'!E2)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!F2),\"\",'13. Nudge techniques'!F2)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!G2),\"\",'13. Nudge techniques'!G2)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!H2),\"\",'13. Nudge techniques'!H2)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!I2),\"\",'13. Nudge techniques'!I2)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!J2),\"\",'13. Nudge techniques'!J2)","v":""}]
[{"$f":"A180","v":"Nudge techniques"},{"$f":"B180","v":13.1},{"$f":"C180","v":"Children are not led or encouraged to provide unnecessary personal information or turn off privacy protections."},"13.1.2","Ensure the language you use to explain the outcomes of two alternatives is not framed more positively for one alternative than for the other.",{"$f":"IF(ISBLANK('13. Nudge techniques'!E3),\"\",'13. Nudge techniques'!E3)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!F3),\"\",'13. Nudge techniques'!F3)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!G3),\"\",'13. Nudge techniques'!G3)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!H3),\"\",'13. Nudge techniques'!H3)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!I3),\"\",'13. Nudge techniques'!I3)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!J3),\"\",'13. Nudge techniques'!J3)","v":""}]
["Nudge techniques",13.1,"Children are not led or encouraged to provide unnecessary personal information or turn off privacy protections.","13.1.3","Check that the online service does not make one option much less cumbersome or time consuming than the alternative, therefore encouraging children to just take the easy option.",{"$f":"IF(ISBLANK('13. Nudge techniques'!E4),\"\",'13. Nudge techniques'!E4)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!F4),\"\",'13. Nudge techniques'!F4)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!G4),\"\",'13. Nudge techniques'!G4)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!H4),\"\",'13. Nudge techniques'!H4)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!I4),\"\",'13. Nudge techniques'!I4)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!J4),\"\",'13. Nudge techniques'!J4)","v":""}]
["Nudge techniques",13.1,"Children are not led or encouraged to provide unnecessary personal information or turn off privacy protections.","13.1.4","Avoid exploiting unconscious psychological processes (eg associations between certain colours or imagery and positive outcomes, or human affirmation needs).",{"$f":"IF(ISBLANK('13. Nudge techniques'!E5),\"\",'13. Nudge techniques'!E5)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!F5),\"\",'13. Nudge techniques'!F5)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!G5),\"\",'13. Nudge techniques'!G5)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!H5),\"\",'13. Nudge techniques'!H5)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!I5),\"\",'13. Nudge techniques'!I5)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!J5),\"\",'13. Nudge techniques'!J5)","v":""}]
["Nudge techniques",13.2,"There is evidence that positive nudge techniques are deployed towards high privacy options, wellbeing enhancing behaviours and parental controls.","13.2.1","Implement techniques to positively nudge children towards supportive resources or provide tools (eg pause and save buttons).",{"$f":"IF(ISBLANK('13. Nudge techniques'!E6),\"\",'13. Nudge techniques'!E6)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!F6),\"\",'13. Nudge techniques'!F6)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!G6),\"\",'13. Nudge techniques'!G6)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!H6),\"\",'13. Nudge techniques'!H6)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!I6),\"\",'13. Nudge techniques'!I6)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!J6),\"\",'13. Nudge techniques'!J6)","v":""}]
["Nudge techniques",{"$f":"B184","v":13.2},{"$f":"C184","v":"There is evidence that positive nudge techniques are deployed towards high privacy options, wellbeing enhancing behaviours and parental controls."},"13.2.2","Conduct an independent assessment or user testing to confirm that your service does not accidentally nudge children down one path or route over another.",{"$f":"IF(ISBLANK('13. Nudge techniques'!E7),\"\",'13. Nudge techniques'!E7)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!F7),\"\",'13. Nudge techniques'!F7)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!G7),\"\",'13. Nudge techniques'!G7)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!H7),\"\",'13. Nudge techniques'!H7)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!I7),\"\",'13. Nudge techniques'!I7)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!J7),\"\",'13. Nudge techniques'!J7)","v":""}]
["Nudge techniques",13.2,"There is evidence that positive nudge techniques are deployed towards high privacy options, wellbeing enhancing behaviours and parental controls.","13.2.3","Build clearly assigned points into your service where children are actively encouraged to speak to or seek the consent from their parents (or a responsible adult).",{"$f":"IF(ISBLANK('13. Nudge techniques'!E8),\"\",'13. Nudge techniques'!E8)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!F8),\"\",'13. Nudge techniques'!F8)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!G8),\"\",'13. Nudge techniques'!G8)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!H8),\"\",'13. Nudge techniques'!H8)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!I8),\"\",'13. Nudge techniques'!I8)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!J8),\"\",'13. Nudge techniques'!J8)","v":""}]
["Nudge techniques",13.2,"There is evidence that positive nudge techniques are deployed towards high privacy options, wellbeing enhancing behaviours and parental controls.","13.2.4","Include signposted or displayed encouragements for children to take a break from play or use.",{"$f":"IF(ISBLANK('13. Nudge techniques'!E9),\"\",'13. Nudge techniques'!E9)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!F9),\"\",'13. Nudge techniques'!F9)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!G9),\"\",'13. Nudge techniques'!G9)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!H9),\"\",'13. Nudge techniques'!H9)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!I9),\"\",'13. Nudge techniques'!I9)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!J9),\"\",'13. Nudge techniques'!J9)","v":""}]
["Nudge techniques",13.3,"There has been a consideration of the impact of using dark nudge technologies to encourage desired behaviour or actions from children within the service for commercial benefit (eg in-game purchases).","13.3.1","Ensure children are not manipulated into making quick or rash decisions or purchases by being presented with a 'count down' offer or time expiring offer.",{"$f":"IF(ISBLANK('13. Nudge techniques'!E10),\"\",'13. Nudge techniques'!E10)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!F10),\"\",'13. Nudge techniques'!F10)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!G10),\"\",'13. Nudge techniques'!G10)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!H10),\"\",'13. Nudge techniques'!H10)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!I10),\"\",'13. Nudge techniques'!I10)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!J10),\"\",'13. Nudge techniques'!J10)","v":""}]
["Nudge techniques",{"$f":"B188","v":13.3},{"$f":"C188","v":"There has been a consideration of the impact of using dark nudge technologies to encourage desired behaviour or actions from children within the service for commercial benefit (eg in-game purchases)."},"13.3.2","Avoid presenting in-app purchases in a way that makes them appear as one-time-only offers or necessary purchases in order to progress in the game.",{"$f":"IF(ISBLANK('13. Nudge techniques'!E11),\"\",'13. Nudge techniques'!E11)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!F11),\"\",'13. Nudge techniques'!F11)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!G11),\"\",'13. Nudge techniques'!G11)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!H11),\"\",'13. Nudge techniques'!H11)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!I11),\"\",'13. Nudge techniques'!I11)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!J11),\"\",'13. Nudge techniques'!J11)","v":""}]
["Nudge techniques",13.3,"There has been a consideration of the impact of using dark nudge technologies to encourage desired behaviour or actions from children within the service for commercial benefit (eg in-game purchases).","13.3.3","Ensure product badges, smart notifications and product recommendations are appropriate for the age of the child and are not used in an excessive way on children using the service.",{"$f":"IF(ISBLANK('13. Nudge techniques'!E12),\"\",'13. Nudge techniques'!E12)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!F12),\"\",'13. Nudge techniques'!F12)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!G12),\"\",'13. Nudge techniques'!G12)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!H12),\"\",'13. Nudge techniques'!H12)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!I12),\"\",'13. Nudge techniques'!I12)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!J12),\"\",'13. Nudge techniques'!J12)","v":""}]
["Nudge techniques",13.3,"There has been a consideration of the impact of using dark nudge technologies to encourage desired behaviour or actions from children within the service for commercial benefit (eg in-game purchases).","13.3.4","Implement appropriate controls over any 'loot boxes' you use. Keep their use to a minimum and ensure they disclose the odds of receiving each type of item before purchase.",{"$f":"IF(ISBLANK('13. Nudge techniques'!E13),\"\",'13. Nudge techniques'!E13)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!F13),\"\",'13. Nudge techniques'!F13)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!G13),\"\",'13. Nudge techniques'!G13)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!H13),\"\",'13. Nudge techniques'!H13)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!I13),\"\",'13. Nudge techniques'!I13)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!J13),\"\",'13. Nudge techniques'!J13)","v":""}]
["Nudge techniques",13.3,"There has been a consideration of the impact of using dark nudge technologies to encourage desired behaviour or actions from children within the service for commercial benefit (eg in-game purchases).","13.3.5","Ensure behavioural and psychographic information on children that you collect as a result of dark nudge techniques is collected lawfully. Avoid repurposing the information in a way that will mentally or physically harm the child, or for a different purpose (eg marketing new unrelated products or services).",{"$f":"IF(ISBLANK('13. Nudge techniques'!E14),\"\",'13. Nudge techniques'!E14)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!F14),\"\",'13. Nudge techniques'!F14)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!G14),\"\",'13. Nudge techniques'!G14)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!H14),\"\",'13. Nudge techniques'!H14)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!I14),\"\",'13. Nudge techniques'!I14)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!J14),\"\",'13. Nudge techniques'!J14)","v":""}]
["Nudge techniques",13.3,"There has been a consideration of the impact of using dark nudge technologies to encourage desired behaviour or actions from children within the service for commercial benefit (eg in-game purchases).","13.3.6","Consider the risks to children for any nudge techniques within your service in all your design decisions and DPIAs. ",{"$f":"IF(ISBLANK('13. Nudge techniques'!E15),\"\",'13. Nudge techniques'!E15)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!F15),\"\",'13. Nudge techniques'!F15)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!G15),\"\",'13. Nudge techniques'!G15)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!H15),\"\",'13. Nudge techniques'!H15)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!I15),\"\",'13. Nudge techniques'!I15)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!J15),\"\",'13. Nudge techniques'!J15)","v":""}]
["Nudge techniques",13.3,"There has been a consideration of the impact of using dark nudge technologies to encourage desired behaviour or actions from children within the service for commercial benefit (eg in-game purchases).","13.3.7","Give children and parents the option to turn off in-app purchases, or behavioural advertising within the service, or reserve these options for a designated area behind a parental gate.",{"$f":"IF(ISBLANK('13. Nudge techniques'!E16),\"\",'13. Nudge techniques'!E16)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!F16),\"\",'13. Nudge techniques'!F16)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!G16),\"\",'13. Nudge techniques'!G16)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!H16),\"\",'13. Nudge techniques'!H16)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!I16),\"\",'13. Nudge techniques'!I16)","v":""},{"$f":"IF(ISBLANK('13. Nudge techniques'!J16),\"\",'13. Nudge techniques'!J16)","v":""}]
["Connected toys & devices",14.1,"There is clarity provided on who is processing the personal information and what their responsibilities are for all connected toys and devices.","14.1.1","Make it clear in privacy information who will process the personal information that the toy or device transmits via the network connection and what their data protection responsibilities are.",{"$f":"IF(ISBLANK('14. Connected toys & devices'!E2),\"\",'14. Connected toys & devices'!E2)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!F2),\"\",'14. Connected toys & devices'!F2)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!G2),\"\",'14. Connected toys & devices'!G2)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!H2),\"\",'14. Connected toys & devices'!H2)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!I2),\"\",'14. Connected toys & devices'!I2)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!J2),\"\",'14. Connected toys & devices'!J2)","v":""}]
[{"$f":"A195","v":"Connected toys & devices"},{"$f":"B195","v":14.1},{"$f":"C195","v":"There is clarity provided on who is processing the personal information and what their responsibilities are for all connected toys and devices."},"14.1.2","Ensure appropriate contracts are in place that clearly outline controller and processor responsibilities if the online functionality or connected element of the toy or device is outsourced or ‘bought in’. ",{"$f":"IF(ISBLANK('14. Connected toys & devices'!E3),\"\",'14. Connected toys & devices'!E3)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!F3),\"\",'14. Connected toys & devices'!F3)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!G3),\"\",'14. Connected toys & devices'!G3)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!H3),\"\",'14. Connected toys & devices'!H3)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!I3),\"\",'14. Connected toys & devices'!I3)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!J3),\"\",'14. Connected toys & devices'!J3)","v":""}]
["Connected toys & devices",14.1,"There is clarity provided on who is processing the personal information and what their responsibilities are for all connected toys and devices.","14.1.3","Provide clear information to indicate that the product processes personal information at the point of sale and before device set-up. ",{"$f":"IF(ISBLANK('14. Connected toys & devices'!E4),\"\",'14. Connected toys & devices'!E4)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!F4),\"\",'14. Connected toys & devices'!F4)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!G4),\"\",'14. Connected toys & devices'!G4)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!H4),\"\",'14. Connected toys & devices'!H4)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!I4),\"\",'14. Connected toys & devices'!I4)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!J4),\"\",'14. Connected toys & devices'!J4)","v":""}]
["Connected toys & devices",14.1,"There is clarity provided on who is processing the personal information and what their responsibilities are for all connected toys and devices.","14.1.4","Ensure both the packaging of the physical product, and the product leaflet or instruction booklet (paper or digital), carry a clear indication (such as an icon) that the product is ‘connected’ and processes people’s personal information.",{"$f":"IF(ISBLANK('14. Connected toys & devices'!E5),\"\",'14. Connected toys & devices'!E5)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!F5),\"\",'14. Connected toys & devices'!F5)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!G5),\"\",'14. Connected toys & devices'!G5)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!H5),\"\",'14. Connected toys & devices'!H5)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!I5),\"\",'14. Connected toys & devices'!I5)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!J5),\"\",'14. Connected toys & devices'!J5)","v":""}]
["Connected toys & devices",14.1,"There is clarity provided on who is processing the personal information and what their responsibilities are for all connected toys and devices.","14.1.5","Provide potential purchasers with the ability to view clear product privacy information, terms and conditions of use and other relevant information online, without having to purchase and set up the device first This means they can make an informed decision about whether to buy the device in the first place.",{"$f":"IF(ISBLANK('14. Connected toys & devices'!E6),\"\",'14. Connected toys & devices'!E6)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!F6),\"\",'14. Connected toys & devices'!F6)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!G6),\"\",'14. Connected toys & devices'!G6)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!H6),\"\",'14. Connected toys & devices'!H6)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!I6),\"\",'14. Connected toys & devices'!I6)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!J6),\"\",'14. Connected toys & devices'!J6)","v":""}]
["Connected toys & devices",14.1,"There is clarity provided on who is processing the personal information and what their responsibilities are for all connected toys and devices.","14.1.6","Communicate ‘just in time’ information to the child or their parent, for example:\n- \tuse auto-play audio messages;\n- \tonly allow default settings to be changed by a support app; or \n- \tsupport interactive auto-bot ‘conversations’ with the user.",{"$f":"IF(ISBLANK('14. Connected toys & devices'!E7),\"\",'14. Connected toys & devices'!E7)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!F7),\"\",'14. Connected toys & devices'!F7)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!G7),\"\",'14. Connected toys & devices'!G7)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!H7),\"\",'14. Connected toys & devices'!H7)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!I7),\"\",'14. Connected toys & devices'!I7)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!J7),\"\",'14. Connected toys & devices'!J7)","v":""}]
["Connected toys & devices",14.2,"There are appropriate technical security measures, including encryption in transfer, when using connected toys and devices.","14.2.1","Implement appropriate security measures to mitigate risks such as:\n- \tunauthorised access to information in transfer;\n- \t‘hacking’ of the device in order to communicate with the child (eg by taking over microphone capabilities); or \n- \tthe unauthorised tracking of their location. ",{"$f":"IF(ISBLANK('14. Connected toys & devices'!E8),\"\",'14. Connected toys & devices'!E8)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!F8),\"\",'14. Connected toys & devices'!F8)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!G8),\"\",'14. Connected toys & devices'!G8)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!H8),\"\",'14. Connected toys & devices'!H8)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!I8),\"\",'14. Connected toys & devices'!I8)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!J8),\"\",'14. Connected toys & devices'!J8)","v":""}]
["Connected toys & devices",{"$f":"B201","v":14.2},{"$f":"C201","v":"There are appropriate technical security measures, including encryption in transfer, when using connected toys and devices."},"14.2.2","Provide multiple user profile options for people of different ages who use the device regularly (eg household members and frequent visitors to a household) to support use by adults, or to tailor the service to the age of a particular child.",{"$f":"IF(ISBLANK('14. Connected toys & devices'!E9),\"\",'14. Connected toys & devices'!E9)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!F9),\"\",'14. Connected toys & devices'!F9)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!G9),\"\",'14. Connected toys & devices'!G9)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!H9),\"\",'14. Connected toys & devices'!H9)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!I9),\"\",'14. Connected toys & devices'!I9)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!J9),\"\",'14. Connected toys & devices'!J9)","v":""}]
["Connected toys & devices",14.2,"There are appropriate technical security measures, including encryption in transfer, when using connected toys and devices.","14.2.3","Include features that make it clear to the child or their parent when the device or toy is collecting personal information (eg a light that switches on when the device is audio recording, filming or collecting personal information in another way).",{"$f":"IF(ISBLANK('14. Connected toys & devices'!E10),\"\",'14. Connected toys & devices'!E10)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!F10),\"\",'14. Connected toys & devices'!F10)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!G10),\"\",'14. Connected toys & devices'!G10)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!H10),\"\",'14. Connected toys & devices'!H10)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!I10),\"\",'14. Connected toys & devices'!I10)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!J10),\"\",'14. Connected toys & devices'!J10)","v":""}]
["Connected toys & devices",14.2,"There are appropriate technical security measures, including encryption in transfer, when using connected toys and devices.","14.2.4","Clearly indicate when listening mode is active if the device uses a stand-by or ‘listening’ mode (eg it listens out for the name the parent or the child has given to the device, or for another key word or phrase to be used, and activates data collection when that word or phrase is used).",{"$f":"IF(ISBLANK('14. Connected toys & devices'!E11),\"\",'14. Connected toys & devices'!E11)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!F11),\"\",'14. Connected toys & devices'!F11)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!G11),\"\",'14. Connected toys & devices'!G11)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!H11),\"\",'14. Connected toys & devices'!H11)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!I11),\"\",'14. Connected toys & devices'!I11)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!J11),\"\",'14. Connected toys & devices'!J11)","v":""}]
["Connected toys & devices",14.2,"There are appropriate technical security measures, including encryption in transfer, when using connected toys and devices.","14.2.5","Avoid or prevent collecting personal information in listening mode.",{"$f":"IF(ISBLANK('14. Connected toys & devices'!E12),\"\",'14. Connected toys & devices'!E12)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!F12),\"\",'14. Connected toys & devices'!F12)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!G12),\"\",'14. Connected toys & devices'!G12)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!H12),\"\",'14. Connected toys & devices'!H12)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!I12),\"\",'14. Connected toys & devices'!I12)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!J12),\"\",'14. Connected toys & devices'!J12)","v":""}]
["Connected toys & devices",14.2,"There are appropriate technical security measures, including encryption in transfer, when using connected toys and devices.","14.2.6","Introduce features that allow collection or listening modes to be easily switched off on the device itself (a ‘connection off’ button), or by online functionality options.",{"$f":"IF(ISBLANK('14. Connected toys & devices'!E13),\"\",'14. Connected toys & devices'!E13)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!F13),\"\",'14. Connected toys & devices'!F13)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!G13),\"\",'14. Connected toys & devices'!G13)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!H13),\"\",'14. Connected toys & devices'!H13)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!I13),\"\",'14. Connected toys & devices'!I13)","v":""},{"$f":"IF(ISBLANK('14. Connected toys & devices'!J13),\"\",'14. Connected toys & devices'!J13)","v":""}]

{"sheet":"Tables & graphs","index":3,"n_rows":27,"n_cols":17,"rows_kept":27,"cut":false,"hidden":true,"merged":[]}
[null,"1. Accountability","2. Transparency","3. Children's rights","4. DPIAs","5. Data minimisation","6. Data sharing","7. Age assurance","8. Detrimental use of info","9. Default privacy settings","10. Parental controls","11. Geolocation data","12. Profiling","13. Nudge techniques","14. Connected toys & devices",null,"Total"]
["Fully meeting our expectation",{"$f":"COUNTIF('1. Accountability'!E:E,A2)","v":0},{"$f":"COUNTIF('2. Transparency'!E:E,A2)","v":0},{"$f":"COUNTIF('3. Children''s rights '!E:E,A2)","v":0},{"$f":"COUNTIF('4. DPIAs'!E:E,A2)","v":0},{"$f":"COUNTIF('5. Data minimisation'!E:E,A2)","v":0},{"$f":"COUNTIF('6. Data sharing'!E:E,A2)","v":0},{"$f":"COUNTIF('7. Age assurance'!E:E,A2)","v":0},{"$f":"COUNTIF('8. Detrimental use of info'!E:E,A2)","v":0},{"$f":"COUNTIF('9. Default privacy settings'!E:E,A2)","v":0},{"$f":"COUNTIF('10. Parental controls'!E:E,A2)","v":0},{"$f":"COUNTIF('11. Geolocation data'!E:E,A2)","v":0},{"$f":"COUNTIF('12. Profiling'!E:E,A2)","v":0},{"$f":"COUNTIF('13. Nudge techniques'!E:E,A2)","v":0},{"$f":"COUNTIF('14. Connected toys & devices'!E:E,A2)","v":0},null,{"$f":"SUM(B2:O2)","v":0}]
["Partially meeting our expectation",{"$f":"COUNTIF('1. Accountability'!E:E,A3)","v":0},{"$f":"COUNTIF('2. Transparency'!E:E,A3)","v":0},{"$f":"COUNTIF('3. Children''s rights '!E:E,A3)","v":0},{"$f":"COUNTIF('4. DPIAs'!E:E,A3)","v":0},{"$f":"COUNTIF('5. Data minimisation'!E:E,A3)","v":0},{"$f":"COUNTIF('6. Data sharing'!E:E,A3)","v":0},{"$f":"COUNTIF('7. Age assurance'!E:E,A3)","v":0},{"$f":"COUNTIF('8. Detrimental use of info'!E:E,A3)","v":0},{"$f":"COUNTIF('9. Default privacy settings'!E:E,A3)","v":0},{"$f":"COUNTIF('10. Parental controls'!E:E,A3)","v":0},{"$f":"COUNTIF('11. Geolocation data'!E:E,A3)","v":0},{"$f":"COUNTIF('12. Profiling'!E:E,A3)","v":0},{"$f":"COUNTIF('13. Nudge techniques'!E:E,A3)","v":0},{"$f":"COUNTIF('14. Connected toys & devices'!E:E,A3)","v":0},null,{"$f":"SUM(B3:O3)","v":0}]
["Not meeting our expectation",{"$f":"COUNTIF('1. Accountability'!E:E,A4)","v":0},{"$f":"COUNTIF('2. Transparency'!E:E,A4)","v":0},{"$f":"COUNTIF('3. Children''s rights '!E:E,A4)","v":0},{"$f":"COUNTIF('4. DPIAs'!E:E,A4)","v":0},{"$f":"COUNTIF('5. Data minimisation'!E:E,A4)","v":0},{"$f":"COUNTIF('6. Data sharing'!E:E,A4)","v":0},{"$f":"COUNTIF('7. Age assurance'!E:E,A4)","v":0},{"$f":"COUNTIF('8. Detrimental use of info'!E:E,A4)","v":0},{"$f":"COUNTIF('9. Default privacy settings'!E:E,A4)","v":0},{"$f":"COUNTIF('10. Parental controls'!E:E,A4)","v":0},{"$f":"COUNTIF('11. Geolocation data'!E:E,A4)","v":0},{"$f":"COUNTIF('12. Profiling'!E:E,A4)","v":0},{"$f":"COUNTIF('13. Nudge techniques'!E:E,A4)","v":0},{"$f":"COUNTIF('14. Connected toys & devices'!E:E,A4)","v":0},null,0]
["Not Applicable",{"$f":"COUNTIF('1. Accountability'!E:E,A5)","v":0},{"$f":"COUNTIF('2. Transparency'!E:E,A5)","v":0},{"$f":"COUNTIF('3. Children''s rights '!E:E,A5)","v":0},{"$f":"COUNTIF('4. DPIAs'!E:E,A5)","v":0},{"$f":"COUNTIF('5. Data minimisation'!E:E,A5)","v":0},{"$f":"COUNTIF('6. Data sharing'!E:E,A5)","v":0},{"$f":"COUNTIF('7. Age assurance'!E:E,A5)","v":0},{"$f":"COUNTIF('8. Detrimental use of info'!E:E,A5)","v":0},{"$f":"COUNTIF('9. Default privacy settings'!E:E,A5)","v":0},{"$f":"COUNTIF('10. Parental controls'!E:E,A5)","v":0},{"$f":"COUNTIF('11. Geolocation data'!E:E,A5)","v":0},{"$f":"COUNTIF('12. Profiling'!E:E,A5)","v":0},{"$f":"COUNTIF('13. Nudge techniques'!E:E,A5)","v":0},{"$f":"COUNTIF('14. Connected toys & devices'!E:E,A5)","v":0},null,0]
["Blank",{"$f":"COUNTBLANK('1. Accountability'!E2:E32)","v":31},{"$f":"COUNTBLANK('2. Transparency'!E2:E9)","v":8},{"$f":"COUNTBLANK('3. Children''s rights '!E2:E6)","v":5},{"$f":"COUNTBLANK('4. DPIAs'!E2:E17)","v":16},{"$f":"COUNTBLANK('5. Data minimisation'!E2:E14)","v":13},{"$f":"COUNTBLANK('6. Data sharing'!E2:E8)","v":7},{"$f":"COUNTBLANK('7. Age assurance'!E2:E38)","v":37},{"$f":"COUNTBLANK('8. Detrimental use of info'!E2:E19)","v":18},{"$f":"COUNTBLANK('9. Default privacy settings'!E2:E10)","v":9},{"$f":"COUNTBLANK('10. Parental controls'!E2:E9)","v":8},{"$f":"COUNTBLANK('11. Geolocation data'!E2:E9)","v":8},{"$f":"COUNTBLANK('12. Profiling'!E2:E18)","v":17},{"$f":"COUNTBLANK('13. Nudge techniques'!E2:E16)","v":15},{"$f":"COUNTBLANK('14. Connected toys & devices'!E2:E13)","v":12},null,204]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[]
[null,"1. Accountability","2. Transparency","3. Children's rights","4. DPIAs","5. Data minimisation","6. Data sharing","7. Age assurance","8. Detrimental use of info","9. Default privacy settings","10. Parental controls","11. Geolocation data","12. Profiling","13. Nudge techniques","14. Connected toys & devices",null,"Total"]
["Not started",{"$f":"COUNTIF('1. Accountability'!I:I,A18)","v":0},{"$f":"COUNTIF('2. Transparency'!I:I,A18)","v":0},{"$f":"COUNTIF('3. Children''s rights '!I:I,A18)","v":0},{"$f":"COUNTIF('4. DPIAs'!I:I,A18)","v":0},{"$f":"COUNTIF('5. Data minimisation'!I:I,A18)","v":0},{"$f":"COUNTIF('6. Data sharing'!I:I,A18)","v":0},{"$f":"COUNTIF('7. Age assurance'!I:I,A18)","v":0},{"$f":"COUNTIF('8. Detrimental use of info'!I:I,A18)","v":0},{"$f":"COUNTIF('9. Default privacy settings'!I:I,A18)","v":0},{"$f":"COUNTIF('10. Parental controls'!I:I,A18)","v":0},{"$f":"COUNTIF('11. Geolocation data'!I:I,A18)","v":0},{"$f":"COUNTIF('12. Profiling'!I:I,A18)","v":0},{"$f":"COUNTIF('13. Nudge techniques'!I:I,A18)","v":0},{"$f":"COUNTIF('14. Connected toys & devices'!I:I,A18)","v":0},null,{"$f":"SUM(B18:O18)","v":0}]
["Action rejected",{"$f":"COUNTIF('1. Accountability'!I:I,A19)","v":0},{"$f":"COUNTIF('2. Transparency'!I:I,A19)","v":0},{"$f":"COUNTIF('3. Children''s rights '!I:I,A19)","v":0},{"$f":"COUNTIF('4. DPIAs'!I:I,A19)","v":0},{"$f":"COUNTIF('5. Data minimisation'!I:I,A19)","v":0},{"$f":"COUNTIF('6. Data sharing'!I:I,A19)","v":0},{"$f":"COUNTIF('7. Age assurance'!I:I,A19)","v":0},{"$f":"COUNTIF('8. Detrimental use of info'!I:I,A19)","v":0},{"$f":"COUNTIF('9. Default privacy settings'!I:I,A19)","v":0},{"$f":"COUNTIF('10. Parental controls'!I:I,A19)","v":0},{"$f":"COUNTIF('11. Geolocation data'!I:I,A19)","v":0},{"$f":"COUNTIF('12. Profiling'!I:I,A19)","v":0},{"$f":"COUNTIF('13. Nudge techniques'!I:I,A19)","v":0},{"$f":"COUNTIF('14. Connected toys & devices'!I:I,A19)","v":0},null,{"$f":"SUM(B19:O19)","v":0}]
["On track",{"$f":"COUNTIF('1. Accountability'!I:I,A20)","v":0},{"$f":"COUNTIF('2. Transparency'!I:I,A20)","v":0},{"$f":"COUNTIF('3. Children''s rights '!I:I,A20)","v":0},{"$f":"COUNTIF('4. DPIAs'!I:I,A20)","v":0},{"$f":"COUNTIF('5. Data minimisation'!I:I,A20)","v":0},{"$f":"COUNTIF('6. Data sharing'!I:I,A20)","v":0},{"$f":"COUNTIF('7. Age assurance'!I:I,A20)","v":0},{"$f":"COUNTIF('8. Detrimental use of info'!I:I,A20)","v":0},{"$f":"COUNTIF('9. Default privacy settings'!I:I,A20)","v":0},{"$f":"COUNTIF('10. Parental controls'!I:I,A20)","v":0},{"$f":"COUNTIF('11. Geolocation data'!I:I,A20)","v":0},{"$f":"COUNTIF('12. Profiling'!I:I,A20)","v":0},{"$f":"COUNTIF('13. Nudge techniques'!I:I,A20)","v":0},{"$f":"COUNTIF('14. Connected toys & devices'!I:I,A20)","v":0},null,0]
["Overdue",{"$f":"COUNTIF('1. Accountability'!I:I,A21)","v":0},{"$f":"COUNTIF('2. Transparency'!I:I,A21)","v":0},{"$f":"COUNTIF('3. Children''s rights '!I:I,A21)","v":0},{"$f":"COUNTIF('4. DPIAs'!I:I,A21)","v":0},{"$f":"COUNTIF('5. Data minimisation'!I:I,A21)","v":0},{"$f":"COUNTIF('6. Data sharing'!I:I,A21)","v":0},{"$f":"COUNTIF('7. Age assurance'!I:I,A21)","v":0},{"$f":"COUNTIF('8. Detrimental use of info'!I:I,A21)","v":0},{"$f":"COUNTIF('9. Default privacy settings'!I:I,A21)","v":0},{"$f":"COUNTIF('10. Parental controls'!I:I,A21)","v":0},{"$f":"COUNTIF('11. Geolocation data'!I:I,A21)","v":0},{"$f":"COUNTIF('12. Profiling'!I:I,A21)","v":0},{"$f":"COUNTIF('13. Nudge techniques'!I:I,A21)","v":0},{"$f":"COUNTIF('14. Connected toys & devices'!I:I,A21)","v":0},null,0]
["Completed",{"$f":"COUNTIF('1. Accountability'!I:I,A22)","v":0},{"$f":"COUNTIF('2. Transparency'!I:I,A22)","v":0},{"$f":"COUNTIF('3. Children''s rights '!I:I,A22)","v":0},{"$f":"COUNTIF('4. DPIAs'!I:I,A22)","v":0},{"$f":"COUNTIF('5. Data minimisation'!I:I,A22)","v":0},{"$f":"COUNTIF('6. Data sharing'!I:I,A22)","v":0},{"$f":"COUNTIF('7. Age assurance'!I:I,A22)","v":0},{"$f":"COUNTIF('8. Detrimental use of info'!I:I,A22)","v":0},{"$f":"COUNTIF('9. Default privacy settings'!I:I,A22)","v":0},{"$f":"COUNTIF('10. Parental controls'!I:I,A22)","v":0},{"$f":"COUNTIF('11. Geolocation data'!I:I,A22)","v":0},{"$f":"COUNTIF('12. Profiling'!I:I,A22)","v":0},{"$f":"COUNTIF('13. Nudge techniques'!I:I,A22)","v":0},{"$f":"COUNTIF('14. Connected toys & devices'!I:I,A22)","v":0},null,0]
["Blank",{"$f":"COUNTBLANK('1. Accountability'!I2:I32)","v":31},{"$f":"COUNTBLANK('2. Transparency'!I2:I9)","v":8},{"$f":"COUNTBLANK('3. Children''s rights '!I2:I6)","v":5},{"$f":"COUNTBLANK('4. DPIAs'!I2:I17)","v":16},{"$f":"COUNTBLANK('5. Data minimisation'!I2:I14)","v":13},{"$f":"COUNTBLANK('6. Data sharing'!I2:I8)","v":7},{"$f":"COUNTBLANK('7. Age assurance'!I2:I38)","v":37},{"$f":"COUNTBLANK('8. Detrimental use of info'!J2:J19)","v":18},{"$f":"COUNTBLANK('9. Default privacy settings'!I2:I10)","v":9},{"$f":"COUNTBLANK('10. Parental controls'!I2:I9)","v":8},{"$f":"COUNTBLANK('11. Geolocation data'!I2:I9)","v":8},{"$f":"COUNTBLANK('12. Profiling'!I2:I18)","v":17},{"$f":"COUNTBLANK('13. Nudge techniques'!I2:I16)","v":15},{"$f":"COUNTBLANK('14. Connected toys & devices'!I2:I13)","v":12},null,204]
[]
[]
[null,"Not started","Action rejected","On track","Overdue","Completed","Blank"]
[null,{"$f":"SUM(B18:O18)","v":0},{"$f":"SUM(B19:O19)","v":0},{"$f":"SUM(B20:O20)","v":0},{"$f":"SUM(B21:O21)","v":0},{"$f":"SUM(B22:O22)","v":0},{"$f":"SUM(B23:O23)","v":204}]

{"sheet":"Lookup","index":4,"n_rows":9,"n_cols":7,"rows_kept":9,"cut":false,"hidden":true,"merged":[]}
["Fully meeting our expectation",null,null,null,"Not started",null,"Not started"]
["Partially meeting our expectation",null,null,null,"Action rejected",null,"In progress"]
["Not meeting our expectation",null,null,null,"On track",null,"Overdue"]
["Not Applicable",null,null,null,"Overdue",null,"Completed"]
[null,null,null,null,"Completed"]
[]
[]
["2000-01-01"]
[{"$f":"TODAY()","v":"2024-09-17"}]

{"sheet":"1. Accountability","index":5,"n_rows":32,"n_cols":10,"rows_kept":32,"cut":false,"hidden":false,"merged":[[1,1,4,1],[1,0,4,0],[5,1,10,1],[5,0,10,0],[11,1,13,1],[11,0,13,0],[26,1,31,1],[26,0,31,0],[14,1,17,1],[14,0,17,0],[18,1,22,1],[18,0,22,0],[23,1,25,1],[23,0,25,0]]}
["Number","Our expectations","Reference","Ways to meet our expectations","Current status","Reasons for Status","Actions","Action Owner","Action Status","Due date\n(DD/MM/YYYY)"]
[1.1000000000000001,"There is an assessment whether children are likely to access the online service, and an appropriate evidence-based decision taken on whether to apply the code standards.","1.1.1","Assess whether a significant number of UK children under 18 years of age are likely to access all, or parts, of your online service. Consider whether:\n- \tthe online service is intended for use by children;\n- \tthe online service is adult-only, but accessed by a significant number of children;\n- \tthere is evidence that children are, or are not, a substantive and identifiable user group (lack of evidence that children are using the online service is not sufficient to support that a service is not accessed by children);\n- \tchildren can access the online service due to weak age assurance measures;\n- \tthere has been customer contact, support requests, or complaints from children or parents;\n- \tthe online service includes adverts that are targeted at children that might evidence a high number of click-throughs or interest from people on child-focused advertising;\n- \tthere is child-focused content on the online service (eg cartoons, animation, music or audio content, incentives for children’s participation, digital functionalities such as gamification, presence of children, influencers or celebrities popular with children); and\n- \tchildren are known to like and access similar online services or content."]
[{"$f":"A2","v":1.1000000000000001},{"$f":"B2","v":"There is an assessment whether children are likely to access the online service, and an appropriate evidence-based decision taken on whether to apply the code standards."},"1.1.2","Complete the assessment before processing the information and document the outcome as part of a data protection impact assessment (DPIA). Include a clear decision and justification on whether children are likely to access all or parts of your online service. "]
[1.1000000000000001,"There is an assessment whether children are likely to access the online service, and an appropriate evidence-based decision taken on whether to apply the code standards.","1.1.3","Review the assessment regularly so it remains accurate, particularly before implementing changes to your online service."]
[1.1000000000000001,"There is an assessment whether children are likely to access the online service, and an appropriate evidence-based decision taken on whether to apply the code standards.","1.1.4","Implement effective measures to prevent access to children if the service is adult-only. Seek sufficient evidence to support that children cannot access it and are not using the online service as a result."]
[1.2000000000000002,"There is an embedded privacy management framework endorsed by management that supports the development and provision of online services aimed at, or likely to be accessed by, children.","1.2.1","Implement an overall governance and privacy management strategy or framework that includes appropriate technical and organisational measures designed to effectively implement the data protection principles."]
[{"$f":"A6","v":1.2000000000000002},{"$f":"B6","v":"There is an embedded privacy management framework endorsed by management that supports the development and provision of online services aimed at, or likely to be accessed by, children."},"1.2.2","Have data protection policies and procedures in place that you update and review regularly and communicate to all staff."]
[1.2000000000000002,"There is an embedded privacy management framework endorsed by management that supports the development and provision of online services aimed at, or likely to be accessed by, children.","1.2.3","Make senior management accountable for understanding and addressing the risks associated with developing and providing online services aimed at or likely to be accessed by children."]
[1.2000000000000002,"There is an embedded privacy management framework endorsed by management that supports the development and provision of online services aimed at, or likely to be accessed by, children.","1.2.4","Appoint a Data Protection Officer (DPO) or a nominated DP lead with oversight of your online services aimed at, or likely to be accessed by, children."]
[1.2000000000000002,"There is an embedded privacy management framework endorsed by management that supports the development and provision of online services aimed at, or likely to be accessed by, children.","1.2.5","Assign responsibility in job descriptions to ensure your services comply with data protection law."]
[1.2000000000000002,"There is an embedded privacy management framework endorsed by management that supports the development and provision of online services aimed at, or likely to be accessed by, children.","1.2.6","Promote a positive data protection culture across your organisation."]
[1.3000000000000003,"Online service developers are appropriately skilled and qualified and have completed data protection training covering children's privacy before starting active development.","1.3.1","Set out the minimum skills and experiences or qualifications required for the role of service developer in recruitment adverts and job descriptions."]
[{"$f":"A12","v":1.3000000000000003},{"$f":"B12","v":"Online service developers are appropriately skilled and qualified and have completed data protection training covering children's privacy before starting active development."},"1.3.2","Complete a training needs analysis for online service developers in privacy considerations and data protection law."]
[1.3000000000000003,"Online service developers are appropriately skilled and qualified and have completed data protection training covering children's privacy before starting active development.","1.3.3","Deliver regular up-to-date and appropriate specialised data protection training to key roles."]
[1.4000000000000004,"There is an effective risk management strategy in place to capture all the privacy risks during the development and provision of online services aimed at, or likely to be accessed by, children. Risks are tracked at a corporate or management level through an appropriate risk register.","1.4.1","Implement an overarching risk management strategy for your online services."]
[{"$f":"A15","v":1.4000000000000004},{"$f":"B15","v":"There is an effective risk management strategy in place to capture all the privacy risks during the development and provision of online services aimed at, or likely to be accessed by, children. Risks are tracked at a corporate or management level through an appropriate risk register."},"1.4.2","Complete an assessment of the level of risk and risk appetite that depends on the extent of the use of your online services. "]
[1.4000000000000004,"There is an effective risk management strategy in place to capture all the privacy risks during the development and provision of online services aimed at, or likely to be accessed by, children. Risks are tracked at a corporate or management level through an appropriate risk register.","1.4.3","Document and track risks on a risk register."]
[1.4000000000000004,"There is an effective risk management strategy in place to capture all the privacy risks during the development and provision of online services aimed at, or likely to be accessed by, children. Risks are tracked at a corporate or management level through an appropriate risk register.","1.4.4","Update management in a timely manner on current risks, their status and any mitigating actions planned."]
[1.5000000000000004,"There are reports against the standards in the code included in any internal or external accountability reports, and there is a programme of compliance audits and KPIs (key performance indicators) to monitor compliance with code standards.","1.5.1","Implement KPIs in areas such as:\n\n- \tnumber of underage and overage users detected and removed from services;\n- \taccess and use of privacy information (click throughs, expansion of layered information, level of engagement with settings);  \n- \tchanges to engagement rates (eg positive nudges and suggestions to save progress or pauses in engagement); \n- \tlevel of complaints and concerns about terms and conditions or content recommendations;\n- \tnumber of information access or erasure requests received; and\n- \tnumber and nature of revisions to service design."]
[{"$f":"A19","v":1.5000000000000004},{"$f":"B19","v":"There are reports against the standards in the code included in any internal or external accountability reports, and there is a programme of compliance audits and KPIs (key performance indicators) to monitor compliance with code standards."},"1.5.2","Include commentary on children's privacy and performance to KPIs in your internal and external accountability reports."]
[1.5000000000000004,"There are reports against the standards in the code included in any internal or external accountability reports, and there is a programme of compliance audits and KPIs (key performance indicators) to monitor compliance with code standards.","1.5.3","Report and review KPIs regularly in appropriate meetings."]
[1.5000000000000004,"There are reports against the standards in the code included in any internal or external accountability reports, and there is a programme of compliance audits and KPIs (key performance indicators) to monitor compliance with code standards.","1.5.4","Implement a programme of internal and external audit to monitor compliance to the standards in the code."]
[1.5000000000000004,"There are reports against the standards in the code included in any internal or external accountability reports, and there is a programme of compliance audits and KPIs (key performance indicators) to monitor compliance with code standards.","1.5.5","Feed audit reports and outcomes back to management and track issues or risks on an appropriate risk register."]
[1.6,"There is an internal record of all processing activities (ROPA) in place.","1.6.1","Complete a data flow mapping exercise to document the information that flows in, around and out of your online system or service."]
[{"$f":"A24","v":1.6},{"$f":"B24","v":"There is an internal record of all processing activities (ROPA) in place."},"1.6.2","Ensure the information documented within your ROPA is in line with the requirements set out in article 30 of the UK GDPR."]
[1.6,"There is an internal record of all processing activities (ROPA) in place.","1.6.3","Review the ROPA on a regular basis to maintain accuracy with current processing activities, policies and procedures."]
[1.7,"There are published rules which govern the behaviour of people who use the service and the conditions for use; and adherence to these rules is monitored. ","1.7.1","Provide people with appropriate terms and conditions or rules before using your online service."]
[{"$f":"A27","v":1.7},{"$f":"B27","v":"There are published rules which govern the behaviour of people who use the service and the conditions for use; and adherence to these rules is monitored. "},"1.7.2","Write terms and conditions or rules in clear language that is appropriate for the age of the intended user and implement different policies depending on the age of the users."]
[1.7,"There are published rules which govern the behaviour of people who use the service and the conditions for use; and adherence to these rules is monitored. ","1.7.3","Have checks in place to provide assurances that people uphold and adhere to the rules."]
[1.7,"There are published rules which govern the behaviour of people who use the service and the conditions for use; and adherence to these rules is monitored. ","1.7.4","Communicate how compliance to the rules or terms and conditions is monitored."]
[1.7,"There are published rules which govern the behaviour of people who use the service and the conditions for use; and adherence to these rules is monitored. ","1.7.5","Introduce systems so that you meet any commitments to people about the content or other aspects of the online service eg anti-bullying)."]
[1.7,"There are published rules which govern the behaviour of people who use the service and the conditions for use; and adherence to these rules is monitored. ","1.7.6","Include details of the action you take if rules are breached or not adhered to."]

{"sheet":"2. Transparency","index":6,"n_rows":9,"n_cols":10,"rows_kept":9,"cut":false,"hidden":false,"merged":[[1,0,8,0],[1,1,8,1]]}
["Number","Our expectations","Reference","Ways to meet our expectations","Current Status","Reasons for Status","Actions","Action Owner","Action Status","Due Date\n(DD/MM/YYYY)"]
[2.1,"Children (and parents or guardians, where appropriate) are proactively provided with privacy information at the time their personal information is collected from them or obtained.","2.1.1","Provide privacy information to children when you collect their information directly through your online service."]
[null,null,"2.1.2","Ensure children (and parents or guardians, where appropriate) have an easy way to access privacy information on an ongoing basis."]
[null,null,"2.1.3","Provide children (and parents or guardians, where appropriate) with privacy information for any personal information you obtain indirectly from another source."]
[null,null,"2.1.4","Provide privacy information to children (and parents or guardians, where appropriate) using a combination of appropriate techniques and in bite-sized chunks at the point you use their information."]
[null,null,"2.1.5","Only use personal information in the ways you’ve described in your privacy information."]
[null,null,"2.1.6","Ensure privacy information is concise, transparent, intelligible and uses clear and plain language suitable for and tailored to the various ages of your users."]
[null,null,"2.1.7","Present information in a way likely to appeal to the age of child who is accessing your online service."]
[null,null,"2.1.8","Prompt children to speak to an adult before they activate any new use of their information. Advise them not to proceed if they are uncertain, if the child falls within an appropriate age range."]

{"sheet":"3. Children's rights ","index":7,"n_rows":6,"n_cols":10,"rows_kept":6,"cut":false,"hidden":false,"merged":[[1,1,5,1],[1,0,5,0]]}
["Number","Our expectations","Reference","Ways to meet our expectations","Current status","Reasons for Status","Actions","Action Owner","Action Status","Due Date\n(DD/MM/YYYY)"]
[3.1,"There are measures or tools in place to inform children about their rights and enable them to understand and exercise them.","3.1.1","Make tools easy for children to find that help them exercise their rights and report concerns."]
[null,null,"3.1.2","Ensure tools are age appropriate, tailored to support specific rights and easy to use."]
[null,null,"3.1.3","Communicate what is happening to a complaint or request, and include ways for the child or their parent to track the progress."]
[null,null,"3.1.4","Provide information about timescales for responding to requests from children and deal with all requests within the timescales set out in article 12(3) of the UK GDPR."]
[null,null,"3.1.5","Take swift action if you receive information indicating there is an ongoing safeguarding issue."]

{"sheet":"4. DPIAs","index":8,"n_rows":17,"n_cols":10,"rows_kept":17,"cut":false,"hidden":false,"merged":[[1,1,3,1],[1,0,3,0],[4,1,11,1],[4,0,11,0],[12,1,16,1],[12,0,16,0]]}
["Number","Our expectations","Reference","Ways to meet our expectations","Current status","Reasons for Status","Actions","Action owner","Action Status","Due date\n(DD/MM/YYY)"]
[4.0999999999999996,"The requirement for a DPIA is documented and online service developers are provided with clear guidance on the assessment criteria.","4.1.1","Reference DPIA requirements in all main project and change management policies and procedures."]
[{"$f":"A2","v":4.0999999999999996},{"$f":"B2","v":"The requirement for a DPIA is documented and online service developers are provided with clear guidance on the assessment criteria."},"4.1.2","Introduce a screening checklist to help you consider whether the processing falls within the scope of the code and is therefore likely to result in a high risk to the rights and freedoms of children. "]
[4.0999999999999996,"The requirement for a DPIA is documented and online service developers are provided with clear guidance on the assessment criteria.","4.1.3","Document the DPIA process, provide staff with training on the application of the process and review it periodically to ensure it remains up-to-date."]
[4.2,"DPIAs are undertaken before carrying out any new types of processing that are likely to result in a high risk to children's rights and freedoms. DPIAs cover the nature, scope, context and purposes of the processing.","4.2.1","Clearly structure DPIAs and take a layered approach, adding technical detail where appropriate."]
[{"$f":"A5","v":4.2},{"$f":"B5","v":"DPIAs are undertaken before carrying out any new types of processing that are likely to result in a high risk to children's rights and freedoms. DPIAs cover the nature, scope, context and purposes of the processing."},"4.2.2","Ensure DPIAs:\n- \tdescribe the nature, scope, context and purposes of the processing in detail;\n- \tclearly consider and document the appropriate lawful basis and article 9 condition for processing;\n- \tclearly set out the relationships and information flows between controllers, processors, people and systems; \n- \tconsider the transparency of the processing and how to make children aware of their rights;\n- \toutline how the information is collected, stored, accessed and who it is shared with;\n- \tinclude information about measures to ensure accuracy, avoid bias and where relevant, explain the use of AI;\n- \tprovide specific details of technological security measures;\n- \tconsider whether the service can be delivered by less intrusive means or using minimal personal information; and\n- \taddress how each of the standards within the code are addressed."]
[4.2,"DPIAs are undertaken before carrying out any new types of processing that are likely to result in a high risk to children's rights and freedoms. DPIAs cover the nature, scope, context and purposes of the processing.","4.2.3","Include an assessment of the online service for:\n- \tphysical harm; \n- \tonline grooming or other sexual exploitation; \n- \tsocial anxiety, self-esteem issues, bullying or peer pressure; \n- \taccess to harmful or inappropriate content; \n- \tmisinformation or undue restriction on information; \n- \tencouraging excessive risk-taking or unhealthy behaviour;\n- \tundermining parental authority or responsibility; \n- \tloss of autonomy or rights (including control over information); \n- \tcompulsive use or attention deficit disorders; \n- \texcessive screen time; \n- \tinterrupted or inadequate sleep patterns; \n- \teconomic exploitation or unfair commercial pressure; or \n- \tany other significant economic, social or developmental disadvantage."]
[4.2,"DPIAs are undertaken before carrying out any new types of processing that are likely to result in a high risk to children's rights and freedoms. DPIAs cover the nature, scope, context and purposes of the processing.","4.2.4","Ensure DPIAs identify measures to eliminate or reduce all risks."]
[4.2,"DPIAs are undertaken before carrying out any new types of processing that are likely to result in a high risk to children's rights and freedoms. DPIAs cover the nature, scope, context and purposes of the processing.","4.2.5","Record the advice and recommendations of the DPO in DPIAs and ensure they have been signed off by the appropriate people."]
[4.2,"DPIAs are undertaken before carrying out any new types of processing that are likely to result in a high risk to children's rights and freedoms. DPIAs cover the nature, scope, context and purposes of the processing.","4.2.6","Carry out a consultation or fully document why this isn’t possible, is unnecessary, or disproportionate."]
[4.2,"DPIAs are undertaken before carrying out any new types of processing that are likely to result in a high risk to children's rights and freedoms. DPIAs cover the nature, scope, context and purposes of the processing.","4.2.7","Establish a clear link between the DPIA and design processes, including details on how to prevent function creep."]
[4.2,"DPIAs are undertaken before carrying out any new types of processing that are likely to result in a high risk to children's rights and freedoms. DPIAs cover the nature, scope, context and purposes of the processing.","4.2.8","Review DPIAs on a regular basis, particularly if you change or update service functionality or use."]
[4.3,"The outputs of a DPIA are acted on to effectively mitigate or manage any risks identified.","4.3.1","Act on the outputs of your DPIA to effectively mitigate or manage any risks identified."]
[{"$f":"A13","v":4.3},{"$f":"B13","v":"The outputs of a DPIA are acted on to effectively mitigate or manage any risks identified."},"4.3.2","Include a stage in the project or product management process to confirm that mitigating controls are in place."]
[4.3,"The outputs of a DPIA are acted on to effectively mitigate or manage any risks identified.","4.3.3","Retain evidence to confirm that you did not start processing until you implemented mitigating controls."]
[4.3,"The outputs of a DPIA are acted on to effectively mitigate or manage any risks identified.","4.3.4","Incorporate DPIAs into the project plan or project risk register."]
[4.3,"The outputs of a DPIA are acted on to effectively mitigate or manage any risks identified.","4.3.5","Refer the DPIA to the ICO for review, if the residual risk is high and you cannot mitigate it further."]

{"sheet":"5. Data minimisation","index":9,"n_rows":14,"n_cols":10,"rows_kept":14,"cut":false,"hidden":false,"merged":[[1,1,7,1],[8,1,13,1],[8,0,13,0],[1,0,7,0]]}
["Number","Our expectations","Reference","Ways to meet our expectations","Current status","Reasons for Status","Actions","Action owner","Action Status","Due date\n(DD/MM/YYYY)"]
[5.0999999999999996,"There is an assessment to determine and differentiate between each individual element of the service and consider what personal information is needed, and for how long, to deliver each one.","5.1.1","Document your reasons for collecting and processing personal information for each element of your service and consider the appropriate retention periods in the DPIA."]
[{"$f":"A2","v":5.0999999999999996},{"$f":"B2","v":"There is an assessment to determine and differentiate between each individual element of the service and consider what personal information is needed, and for how long, to deliver each one."},"5.1.2","Maintain a retention schedule that details how long you will retain the information."]
[5.0999999999999996,"There is an assessment to determine and differentiate between each individual element of the service and consider what personal information is needed, and for how long, to deliver each one.","5.1.3","Consider the information you collect in order to develop your service that you may no longer need when applying retention periods."]
[5.0999999999999996,"There is an assessment to determine and differentiate between each individual element of the service and consider what personal information is needed, and for how long, to deliver each one.","5.1.4","Implement measures so that you only collect the minimum amount of information (eg only collect the information you need for each element of the service the child is actively engaged with)."]
[5.0999999999999996,"There is an assessment to determine and differentiate between each individual element of the service and consider what personal information is needed, and for how long, to deliver each one.","5.1.5","When you offer service enhancements, avoid ‘bundling in’ or collecting additional information on top of the personal information you need to deliver your core services.  "]
[5.0999999999999996,"There is an assessment to determine and differentiate between each individual element of the service and consider what personal information is needed, and for how long, to deliver each one.","5.1.6","Give children as much choice as possible over which elements of the service they wish to use and therefore how much personal information they need to provide."]
[5.0999999999999996,"There is an assessment to determine and differentiate between each individual element of the service and consider what personal information is needed, and for how long, to deliver each one.","5.1.7","Provide children with a choice about whether they wish their personal information to be used for each additional purpose or service enhancement (eg through the default privacy settings)."]
[5.2,"There are regular reviews of the information held and weeding activities are undertaken to reduce excessive or unnecessary personal information. Information is deleted in line with the retention schedule.","5.2.1","Understand how data flows into, around, and out of your service and document this in data flow maps."]
[{"$f":"A9","v":5.2},{"$f":"B9","v":"There are regular reviews of the information held and weeding activities are undertaken to reduce excessive or unnecessary personal information. Information is deleted in line with the retention schedule."},"5.2.2"," Weed information according to the retention schedule."]
[5.2,"There are regular reviews of the information held and weeding activities are undertaken to reduce excessive or unnecessary personal information. Information is deleted in line with the retention schedule.","5.2.3","Delete information you no longer need or is out-of-date (or put it beyond reach)."]
[5.2,"There are regular reviews of the information held and weeding activities are undertaken to reduce excessive or unnecessary personal information. Information is deleted in line with the retention schedule.","5.2.4","Pseudonymise or anonymise information you still need for research purposes or for continued service accuracy (eg in AI systems) wherever possible."]
[5.2,"There are regular reviews of the information held and weeding activities are undertaken to reduce excessive or unnecessary personal information. Information is deleted in line with the retention schedule.","5.2.5","If there are changes to service functionality or features, review the DPIA and retention schedule to ensure you only: \n- \tcollect the minimum information you now need; and\n- \tdelete any information you hold that you no longer require."]
[5.2,"There are regular reviews of the information held and weeding activities are undertaken to reduce excessive or unnecessary personal information. Information is deleted in line with the retention schedule.","5.2.6"," Give children easy options to request you delete their personal information."]

{"sheet":"6. Data sharing","index":10,"n_rows":8,"n_cols":10,"rows_kept":8,"cut":false,"hidden":false,"merged":[[1,1,7,1],[1,0,7,0]]}
["Number","Our expectations","Reference","Ways to meet our expectations","Current status","Reasons for Status","Actions","Action owner","Action Status","Due Date\n(DD/MM/YYYY)"]
[6.1,"There are measures in place to ensure that if children’s personal information is shared with others, it is done so in a fair and transparent manner.","6.1.1","Provide privacy information to children that makes it clear what, when and who you might share their personal information with."]
[null,null,"6.1.2","Ask senior management to authorise all sharing decisions and document their authorisation."]
[null,null,"6.1.3","Consider and document all the relevant issues and risks to the child associated with any data sharing and ensure you fully mitigate these risks."]
[null,null,"6.1.4","Confirm that the ‘best interests of the child’ are a primary consideration whenever you share children’s personal information."]
[null,null,"6.1.5","Conduct an assessment of the legality of the sharing."]
[null,null,"6.1.6","Undertake due diligence checks with any third parties you share information with to check the adequacy of their data protection practices and limit any further distribution of the information."]
[null,null,"6.1.7","Give children the option to opt out of the sharing of their information, if this is not a core function of your service."]

{"sheet":"7. Age assurance","index":11,"n_rows":38,"n_cols":10,"rows_kept":38,"cut":false,"hidden":false,"merged":[[1,1,12,1],[1,0,12,0],[13,1,15,1],[13,0,15,0],[16,1,19,1],[16,0,19,0],[32,1,34,1],[32,0,34,0],[35,0,37,0],[35,1,37,1],[20,1,22,1],[20,0,22,0],[23,1,27,1],[23,0,27,0],[28,0,31,0],[28,1,31,1]]}
["Number","Our expectations","Reference","Ways to meet our expectations","Current Status","Reasons for Status","Actions","Action owner","Action Status","Due Date\n(DD/MM/YYYY)"]
[7.1,"An assessment has been completed to consider and document the most appropriate age assurance method(s) based on the risks posed to children’s privacy. Methods are in place to establish age which are appropriate to the privacy risks that arise from the personal information being processed.","7.1.1","Use research to determine whether any age assurance measures may deter children from accessing services, even those designed for them."]
[{"$f":"A2","v":7.1},{"$f":"B2","v":"An assessment has been completed to consider and document the most appropriate age assurance method(s) based on the risks posed to children’s privacy. Methods are in place to establish age which are appropriate to the privacy risks that arise from the personal information being processed."},"7.1.2","Assess various options available for verifying the actual age of users or the audience."]
[7.1,"An assessment has been completed to consider and document the most appropriate age assurance method(s) based on the risks posed to children’s privacy. Methods are in place to establish age which are appropriate to the privacy risks that arise from the personal information being processed.","7.1.3","Consider the risks and apply mitigating controls for predicted or estimated age assurance vs substantiated age checks."]
[7.1,"An assessment has been completed to consider and document the most appropriate age assurance method(s) based on the risks posed to children’s privacy. Methods are in place to establish age which are appropriate to the privacy risks that arise from the personal information being processed.","7.1.4","Consider which method of age assurance to apply depending on whether the service is used by authenticated or non-authenticated users (eg whether people are logged in). Select appropriate age assurance measure(s) that are sufficiently robust and effective."]
[7.1,"An assessment has been completed to consider and document the most appropriate age assurance method(s) based on the risks posed to children’s privacy. Methods are in place to establish age which are appropriate to the privacy risks that arise from the personal information being processed.","7.1.5","Avoid solely relying on methods of self-declaration (when a user simply states their age or date of birth but does not provide any evidence to confirm it), if there may be a risk to the child if unverified. "]
[7.1,"An assessment has been completed to consider and document the most appropriate age assurance method(s) based on the risks posed to children’s privacy. Methods are in place to establish age which are appropriate to the privacy risks that arise from the personal information being processed.","7.1.6","Ensure when you use a self-declaration age gate that:\n- \tthis is proportionate based on the risks to children of accessing the online service;\n- \tthere is clear evidence that it is sufficiently robust and effective; and\n- \tage gates are not extensions of the online service (ie the age-gating page doesn't allow access to parts of the online service or content before age assurance occurs)."]
[7.1,"An assessment has been completed to consider and document the most appropriate age assurance method(s) based on the risks posed to children’s privacy. Methods are in place to establish age which are appropriate to the privacy risks that arise from the personal information being processed.","7.1.7","Collect the minimum amount of personal information you need to give an appropriate level of certainty about the age of individual people."]
[7.1,"An assessment has been completed to consider and document the most appropriate age assurance method(s) based on the risks posed to children’s privacy. Methods are in place to establish age which are appropriate to the privacy risks that arise from the personal information being processed.","7.1.8","Consider how the implementation of age assurance could increase the risk of intrusive information collection."]
[7.1,"An assessment has been completed to consider and document the most appropriate age assurance method(s) based on the risks posed to children’s privacy. Methods are in place to establish age which are appropriate to the privacy risks that arise from the personal information being processed.","7.1.9","Ask for confirmation of age from the main (confirmed adult) account holder to set up child profiles and restrict further access with a password or PIN if there are already registered adult account holders."]
[7.1,"An assessment has been completed to consider and document the most appropriate age assurance method(s) based on the risks posed to children’s privacy. Methods are in place to establish age which are appropriate to the privacy risks that arise from the personal information being processed.","7.1.10"," Use technical measures to discourage false declarations of age (eg prevent people from immediately resubmitting a new age if they are denied access to your service when they first self-declare their age). "]
[7.1,"An assessment has been completed to consider and document the most appropriate age assurance method(s) based on the risks posed to children’s privacy. Methods are in place to establish age which are appropriate to the privacy risks that arise from the personal information being processed.","7.1.11","Avoid giving people no choice but to provide hard identifiers, unless the processing risks really warrant such an approach. If used, consider the impacts on privacy to the child."]
[7.1,"An assessment has been completed to consider and document the most appropriate age assurance method(s) based on the risks posed to children’s privacy. Methods are in place to establish age which are appropriate to the privacy risks that arise from the personal information being processed.","7.1.12","Assess the risks of children younger than the minimum age accessing your online service and its content."]
[7.2,"Appropriate technical and organisational measures are implemented to protect personal information that is collected in order to assure age (and ensure this information is not then repurposed).","7.2.1","Implement appropriate security measures (eg restricted access or encryption) to protect information you collect for age verification."]
[{"$f":"A14","v":7.2},{"$f":"B14","v":"Appropriate technical and organisational measures are implemented to protect personal information that is collected in order to assure age (and ensure this information is not then repurposed)."},"7.2.2","Assess the likelihood of a security breach or attack (eg a model inversion attack to re-identify a child)."]
[7.2,"Appropriate technical and organisational measures are implemented to protect personal information that is collected in order to assure age (and ensure this information is not then repurposed).","7.2.3","Ensure information you collect for age assurance is not re-purposed for other purposes (eg targeting children with advertising for products they might like, or sending them details of birthday offers without explicit consent)."]
[7.3,"There has been a clear decision documented about the minimum success criteria for statistical accuracy of any proposed age estimation (AE) or age verification (AV) solutions. The solution is tested against this criteria.","7.3.1","Implement measures to provide confidence in the age range that child users fall into."]
[{"$f":"A17","v":7.3},{"$f":"B17","v":"There has been a clear decision documented about the minimum success criteria for statistical accuracy of any proposed age estimation (AE) or age verification (AV) solutions. The solution is tested against this criteria."},"7.3.2","Document the accuracy tolerance levels in either internal design documents or third-party contracts (if the AE is supplied by a third party)."]
[7.3,"There has been a clear decision documented about the minimum success criteria for statistical accuracy of any proposed age estimation (AE) or age verification (AV) solutions. The solution is tested against this criteria.","7.3.3","Complete due diligence before procuring a third party AE system to understand and confirm the level of statistical accuracy that you can expect."]
[7.3,"There has been a clear decision documented about the minimum success criteria for statistical accuracy of any proposed age estimation (AE) or age verification (AV) solutions. The solution is tested against this criteria.","7.3.4","Document and implement a test plan which includes tolerances for errors as a result of testing the solution."]
[7.4,"Privacy information is provided at the point of AE or AV activation to explain how automated decisions are made, in a way that people can understand.","7.4.1","Communicate the methods deployed to confirm a person’s age as part of the verification process to ensure transparency."]
[{"$f":"A21","v":7.4},{"$f":"B21","v":"Privacy information is provided at the point of AE or AV activation to explain how automated decisions are made, in a way that people can understand."},"7.4.2","Clarify in the privacy information you provide at the point of the AE or AV check: \n- \twhy you are doing the checks; \n- \twhat information you are collecting; \n- \twho you are sharing it with; \n- \thow long you are keeping it; and \n- \thow people can challenge the result of the check."]
[7.4,"Privacy information is provided at the point of AE or AV activation to explain how automated decisions are made, in a way that people can understand.","7.4.3","Ensure the information you provide is age appropriate to the user."]
[7.5,"If an automated age assurance process is deployed that could potentially deny someone access to the platform or service, there are processes in place for people to: \n- \tchallenge the outcome; \n- \trequest a human review of the decision; and \n- \trequest the information is rectified appropriately.","7.5.1","Provide a simple way for children to ask you to reconsider an automated decision."]
[{"$f":"A24","v":7.5},{"$f":"B24","v":"If an automated age assurance process is deployed that could potentially deny someone access to the platform or service, there are processes in place for people to: \n- \tchallenge the outcome; \n- \trequest a human review of the decision; and \n- \trequest the information is rectified appropriately."},"7.5.2","Include an element of human interaction and review, if an automated decision is challenged."]
[7.5,"If an automated age assurance process is deployed that could potentially deny someone access to the platform or service, there are processes in place for people to: \n- \tchallenge the outcome; \n- \trequest a human review of the decision; and \n- \trequest the information is rectified appropriately.","7.5.3","Give an opportunity for children to provide additional information or gain parental consent to access a system or service, if appropriate."]
[7.5,"If an automated age assurance process is deployed that could potentially deny someone access to the platform or service, there are processes in place for people to: \n- \tchallenge the outcome; \n- \trequest a human review of the decision; and \n- \trequest the information is rectified appropriately.","7.5.4","If a challenge is upheld following investigation, review the accuracy of the solution to determine if outputs still fall within acceptable accuracy tolerances."]
[7.5,"If an automated age assurance process is deployed that could potentially deny someone access to the platform or service, there are processes in place for people to: \n- \tchallenge the outcome; \n- \trequest a human review of the decision; and \n- \trequest the information is rectified appropriately.","7.5.5"," Update any inaccurate personal information you hold to reflect the decision."]
[7.6,"There are checks and contractual agreements in place with third-party provided age assurance solutions.","7.6.1","Carry out due diligence checks before using third-party age verification services to satisfy yourself that the level of certainty it confirms age with is sufficient (PAS standard 1296 ‘Online age checking’ may help with this). Also check that it complies with data protection requirements."]
[{"$f":"A29","v":7.6},{"$f":"B29","v":"There are checks and contractual agreements in place with third-party provided age assurance solutions."},"7.6.2","Check that there are appropriate security measures in place to protect the confidentiality and integrity of personal information."]
[7.6,"There are checks and contractual agreements in place with third-party provided age assurance solutions.","7.6.3","Check that there are appropriate measures in place to protect and enable people’s rights."]
[7.6,"There are checks and contractual agreements in place with third-party provided age assurance solutions.","7.6.4","Ensure written contracts include all the details, terms and clauses required under the UK GDPR."]
[7.7,"Where people are able to register for a service using a pre-existing identity created with a third party (such as allowing people to register using an existing social media or similar identity), there are processes in place to ensure that the age assurance carried out by the third party is sufficient to meet the requirements for the service being registered for. ","7.7.1","Carry out due diligence checks before using third-party age verification services to satisfy yourself that the level of certainty it confirms age with is sufficient (PAS standard 1296 ‘Online age checking’ may help with this). Also check that it complies with data protection requirements."]
[{"$f":"A33","v":7.7},{"$f":"B33","v":"Where people are able to register for a service using a pre-existing identity created with a third party (such as allowing people to register using an existing social media or similar identity), there are processes in place to ensure that the age assurance carried out by the third party is sufficient to meet the requirements for the service being registered for. "},"7.7.2","Undertake periodic checks of the accuracy and effectiveness of the pre-existing identification to gain assurances that you can continue to rely on it."]
[7.7,"Where people are able to register for a service using a pre-existing identity created with a third party (such as allowing people to register using an existing social media or similar identity), there are processes in place to ensure that the age assurance carried out by the third party is sufficient to meet the requirements for the service being registered for. ","7.7.3","Consider using additional age checks to confirm the accuracy of the pre-existing identification."]
[7.8,"If the age of a user has not been established with the appropriate level of certainty, then the standards in the code have been applied to all users, as far as is relevant, in order to ensure appropriate protection.","7.8.1","Apply all the standards to all people if you have not carried out age assurance checks or they are insufficient. "]
[{"$f":"A36","v":7.8},{"$f":"B36","v":"If the age of a user has not been established with the appropriate level of certainty, then the standards in the code have been applied to all users, as far as is relevant, in order to ensure appropriate protection."},"7.8.2","Implement measures to protect all users within the user journey, or in specific design features, if you are not sufficiently certain whether they are children. "]
[7.8,"If the age of a user has not been established with the appropriate level of certainty, then the standards in the code have been applied to all users, as far as is relevant, in order to ensure appropriate protection.","7.8.3","Set the default privacy settings to high for all users."]

{"sheet":"8. Detrimental use of info","index":12,"n_rows":19,"n_cols":10,"rows_kept":19,"cut":false,"hidden":false,"merged":[[14,1,18,1],[14,0,18,0],[8,1,13,1],[8,0,13,0],[1,0,7,0],[1,1,7,1]]}
["Number","Our expectations","Reference","Ways to meet our expectations","Current Status","Reasons for Status","Actions","Action owner","Action Status","Due Date\n(DD/MM/YYYY)"]
[8.1,"There are measures in place to ensure children’s information is not used to promote or market any services to them in a way that is obviously detrimental to their physical or mental health and wellbeing.","8.1.1","Limit the use of children’s personal information to what is essential for you to provide the main service."]
[{"$f":"A2","v":8.1},{"$f":"B2","v":"There are measures in place to ensure children’s information is not used to promote or market any services to them in a way that is obviously detrimental to their physical or mental health and wellbeing."},"8.1.2","Keep aware of relevant standards and industry codes of practice about children, including government advice on child welfare for digital or online services."]
[8.1,"There are measures in place to ensure children’s information is not used to promote or market any services to them in a way that is obviously detrimental to their physical or mental health and wellbeing.","8.1.3","Review and check that there will be no detrimental effect on a child from any promotion of additional services (as a result of behavioural analytics or profiling of personal information)."]
[8.1,"There are measures in place to ensure children’s information is not used to promote or market any services to them in a way that is obviously detrimental to their physical or mental health and wellbeing.","8.1.4","Ensure that the child has to individually select and activate any optional uses of personal information that are designed to promote or market additional services."]
[8.1,"There are measures in place to ensure children’s information is not used to promote or market any services to them in a way that is obviously detrimental to their physical or mental health and wellbeing.","8.1.5","Control when and where you encourage children to buy advertised products or persuade their parents or other adults to buy advertised products for them."]
[8.1,"There are measures in place to ensure children’s information is not used to promote or market any services to them in a way that is obviously detrimental to their physical or mental health and wellbeing.","8.1.6","Ensure transparency for paid-for content and product placement."]
[8.1,"There are measures in place to ensure children’s information is not used to promote or market any services to them in a way that is obviously detrimental to their physical or mental health and wellbeing.","8.1.7","Restrict user activation of any settings which allow third parties to use personal information, unless there is a compelling reason, taking into account the best interests of the child. "]
[8.1999999999999993,"Where information is used to promote or personalise content feeds, the content is not obviously detrimental to the child or in breach of other regulatory restrictions or advice (eg Online Safety Act 2023 and advertising rules).","8.2.1","Review and check that there will be no detrimental effect on a child from any promotion of additional content (as a result of behavioural analytics or profiling of personal information)."]
[{"$f":"A9","v":8.1999999999999993},{"$f":"B9","v":"Where information is used to promote or personalise content feeds, the content is not obviously detrimental to the child or in breach of other regulatory restrictions or advice (eg Online Safety Act 2023 and advertising rules)."},"8.2.2","Complete checks before releasing personalised content to children to confirm that there will be no detrimental effects as a result of the personalisation."]
[8.1999999999999993,"Where information is used to promote or personalise content feeds, the content is not obviously detrimental to the child or in breach of other regulatory restrictions or advice (eg Online Safety Act 2023 and advertising rules).","8.2.3","Conduct further analysis to determine whether the content will have a detrimental effect on certain user profiles or personal characteristics."]
[8.1999999999999993,"Where information is used to promote or personalise content feeds, the content is not obviously detrimental to the child or in breach of other regulatory restrictions or advice (eg Online Safety Act 2023 and advertising rules).","8.2.4","Tailor the checks to take into account the various age groups of children and the differing effects the content may have, depending on the age of the child."]
[8.1999999999999993,"Where information is used to promote or personalise content feeds, the content is not obviously detrimental to the child or in breach of other regulatory restrictions or advice (eg Online Safety Act 2023 and advertising rules).","8.2.5","Ensure that the child has to individually select and activate any optional uses of personal information that are designed to personalise the service."]
[8.1999999999999993,"Where information is used to promote or personalise content feeds, the content is not obviously detrimental to the child or in breach of other regulatory restrictions or advice (eg Online Safety Act 2023 and advertising rules).","8.2.6","Present children with an easy way to report any unwanted, harmful or detrimental content."]
[8.3000000000000007,"Strategies used to extend user engagement or encourage people to continue playing a game, watching video content or otherwise staying online, are not detrimental to a child's mental or physical wellbeing.","8.3.1","Implement prompts or informative messages supporting children to take breaks from extended or frequent engagement."]
[{"$f":"A15","v":8.3000000000000007},{"$f":"B15","v":"Strategies used to extend user engagement or encourage people to continue playing a game, watching video content or otherwise staying online, are not detrimental to a child's mental or physical wellbeing."},"8.3.2","Review your online services regularly to remove addictive capabilities and discourage excessive engagement that may have arisen since you launched the service."]
[8.3000000000000007,"Strategies used to extend user engagement or encourage people to continue playing a game, watching video content or otherwise staying online, are not detrimental to a child's mental or physical wellbeing.","8.3.3","Monitor the online activity of children and support children who engage excessively."]
[8.3000000000000007,"Strategies used to extend user engagement or encourage people to continue playing a game, watching video content or otherwise staying online, are not detrimental to a child's mental or physical wellbeing.","8.3.4","Restrict push notifications that might encourage children to engage in an unhealthy way, such as overnight."]
[8.3000000000000007,"Strategies used to extend user engagement or encourage people to continue playing a game, watching video content or otherwise staying online, are not detrimental to a child's mental or physical wellbeing.","8.3.5","Avoid applying penalties to children that disconnect during online sessions."]

{"sheet":"9. Default privacy settings","index":13,"n_rows":10,"n_cols":10,"rows_kept":10,"cut":false,"hidden":false,"merged":[[4,1,9,1],[4,0,9,0],[1,0,3,0],[1,1,3,1]]}
["Number","Our expectations","Reference","Ways to meet our expectations","Current Status","Reasons for Status","Actions","Action owner","Action Status","Due Date\n(DD/MM/YYYY)"]
[9.1,"For services accessed, or likely to be accessed, by children, each processing activity is reviewed to determine whether it might pose a risk to children and then the default privacy setting is set to high privacy.","9.1.1","Set the default setting to 'high privacy' for direct and core processing of children’s information, unless there is a compelling reason for a different default setting, taking into account the best interests of the child."]
[{"$f":"A2","v":9.1},{"$f":"B2","v":"For services accessed, or likely to be accessed, by children, each processing activity is reviewed to determine whether it might pose a risk to children and then the default privacy setting is set to high privacy."},"9.1.2","Document the decision-making process, if you determine that some core processing for children does not require a high privacy setting (eg for safeguarding reasons)."]
[9.1,"For services accessed, or likely to be accessed, by children, each processing activity is reviewed to determine whether it might pose a risk to children and then the default privacy setting is set to high privacy.","9.1.3","Ensure children’s personal information is not visible or accessible to other people who use the service or third parties."]
[9.1999999999999993,"There are measures in place to ensure that any user or system generated changes to privacy settings do not compromise children’s privacy.","9.2.1","If children do change their settings, ensure that they return to the high privacy defaults when they end the current session.  "]
[{"$f":"A5","v":9.1999999999999993},{"$f":"B5","v":"There are measures in place to ensure that any user or system generated changes to privacy settings do not compromise children’s privacy."},"9.2.2","Provide children with age-appropriate explanations and prompts at the point they attempt to change any privacy settings."]
[9.1999999999999993,"There are measures in place to ensure that any user or system generated changes to privacy settings do not compromise children’s privacy.","9.2.3","If settings are changed, ensure that age-appropriate content and ads are still served."]
[9.1999999999999993,"There are measures in place to ensure that any user or system generated changes to privacy settings do not compromise children’s privacy.","9.2.4","Implement measures to retain any privacy settings that children have applied following a software update, an update to security measures or an introduction of new features."]
[9.1999999999999993,"There are measures in place to ensure that any user or system generated changes to privacy settings do not compromise children’s privacy.","9.2.5","Allow children to set up their own profiles with their own individual privacy settings if your online service allows multiple people to access the service from one device."]
[9.1999999999999993,"There are measures in place to ensure that any user or system generated changes to privacy settings do not compromise children’s privacy.","9.2.6","Ensure children can access and check profiles easily. "]

{"sheet":"10. Parental controls","index":14,"n_rows":9,"n_cols":10,"rows_kept":9,"cut":false,"hidden":false,"merged":[[6,1,8,1],[1,1,5,1],[1,0,5,0],[6,0,8,0]]}
["Number","Our expectations","Reference","Ways to meet our expectations","Current Status","Reasons for Status","Actions","Action owner","Action Status","Due Date\n(DD/MM/YYYY)"]
[10.1,"There are parental controls in place to allow parents or guardians to place limits on a child’s online activity.","10.1.1","Include options to set time limits or bedtimes, restrict internet access to pre-approved sites or services only, and restrict in-app purchases. "]
[{"$f":"A2","v":10.1},"There are parental controls in place to allow parents or guardians to place limits on a child’s online activity.","10.1.2","Provide resources to help parents explain the service to their child and discuss privacy with them."]
[10.1,"There are parental controls in place to allow parents or guardians to place limits on a child’s online activity.","10.1.3","Provide resources to support age-appropriate discussion between a parent and child about potential online threats and harms."]
[10.1,"There are parental controls in place to allow parents or guardians to place limits on a child’s online activity.","10.1.4","Provide easy access to information to help parents monitor the effectiveness of controls they have set."]
[10.1,"There are parental controls in place to allow parents or guardians to place limits on a child’s online activity.","10.1.5","Ensure parental controls are easy to set up and manage."]
[10.199999999999999,"Age-appropriate information is provided to tell the child that parental controls are in place and monitoring or tracking is active.","10.2.1","Provide children with age-appropriate resources so that they are aware that their activity is being monitored by their parents or their location tracked."]
[{"$f":"A7","v":10.199999999999999},"Age-appropriate information is provided to tell the child that parental controls are in place and monitoring or tracking is active.","10.2.2","Monitor and stress test the controls regularly to ensure they remain fit for purpose while still protecting children’s rights and freedoms."]
[10.199999999999999,"Age-appropriate information is provided to tell the child that parental controls are in place and monitoring or tracking is active.","10.2.3","Present children with a clear and obvious sign when parental controls are active (eg a lit up icon)."]

{"sheet":"11. Geolocation data","index":15,"n_rows":9,"n_cols":10,"rows_kept":9,"cut":false,"hidden":false,"merged":[[1,1,2,1],[3,1,8,1],[1,0,2,0],[3,0,8,0]]}
["Number","Our expectations","Reference","Ways to meet our expectations","Current Status","Reasons for Status","Actions","Action owner","Action Status","Due Date\n(DD/MM/YYYY)"]
[11.1,"There are appropriate measures in place to provide transparency to children around the use of their geolocation data.","11.1.1","Provide children with information, at the point of sign-up, and each time the service is accessed to: \n- \talert them to the use of geolocation data; and \n- \tprompt them to discuss this with a trusted adult, if they don’t understand what it means."]
[{"$f":"A2","v":11.1},"There are appropriate measures in place to provide transparency to children around the use of their geolocation data.","11.1.2","Provide children with a clear indication of when their location is and isn’t being tracked (eg by use of a clear symbol visible to the child). This ensures location tracking can’t be turned on, or left on, inadvertently or by mistake."]
[11.2,"Where geolocation tracking is necessary, there is an assessment to determine at what level of granularity a child's location needs to be tracked to provide each element of the service.","11.2.1","Assess whether geolocation tracking is essential to provide children with your service."]
[{"$f":"A4","v":11.2},"Where geolocation tracking is necessary, there is an assessment to determine at what level of granularity a child's location needs to be tracked to provide each element of the service.","11.2.2","Offer children different settings for different levels of service, if appropriate."]
[11.2,"Where geolocation tracking is necessary, there is an assessment to determine at what level of granularity a child's location needs to be tracked to provide each element of the service.","11.2.3","Apply high privacy settings to any geolocation services that go over and above the core service."]
[11.2,"Where geolocation tracking is necessary, there is an assessment to determine at what level of granularity a child's location needs to be tracked to provide each element of the service.","11.2.4","Switch ‘off by default’ any geolocation data collection settings. Ensure children have to actively change the default setting to allow their geolocation data to be used."]
[11.2,"Where geolocation tracking is necessary, there is an assessment to determine at what level of granularity a child's location needs to be tracked to provide each element of the service.","11.2.5","Apply a privacy setting to any option that makes the child’s location visible to others."]
[11.2,"Where geolocation tracking is necessary, there is an assessment to determine at what level of granularity a child's location needs to be tracked to provide each element of the service.","11.2.6","Ensure you meet PECR requirements, if the geolocation data you are processing also meets the definition of ‘location data’ in PECR."]

{"sheet":"12. Profiling","index":16,"n_rows":18,"n_cols":10,"rows_kept":18,"cut":false,"hidden":false,"merged":[[14,1,17,1],[14,0,17,0],[1,1,3,1],[1,0,3,0],[4,1,8,1],[4,0,8,0],[9,1,13,1],[9,0,13,0]]}
["Number","Our expectations","Reference","Ways to meet our expectations","Current Status","Reasons for Status","Actions","Action owner","Action Status","Due Date\n(DD/MM/YYYY)"]
[12.1,"The privacy risks for children are considered before any profiling activities.","12.1.1","Assess whether profiling is essential to provide children with the service."]
[{"$f":"A2","v":12.1},"The privacy risks for children are considered before any profiling activities.","12.1.2","Assess the impact to children's rights and freedoms of the profiling activities that are essential for you to provide your core service."]
[12.1,"The privacy risks for children are considered before any profiling activities.","12.1.3","Apply privacy settings that are 'on by default’ for all non-essential profiling."]
[12.2,"Age-appropriate information is provided at the point any profiling options are turned on to inform children what will happen to their personal information and highlight any risks inherent in that processing.","12.2.1","Give age appropriate and timely information about the processing at the point that profiling takes place."]
[{"$f":"A5","v":12.2},"Age-appropriate information is provided at the point any profiling options are turned on to inform children what will happen to their personal information and highlight any risks inherent in that processing.","12.2.2"," Assess whether you need any additional age assurance measures, (eg depending on the age range of the child, at the point at which profiling is enabled)."]
[12.2,"Age-appropriate information is provided at the point any profiling options are turned on to inform children what will happen to their personal information and highlight any risks inherent in that processing.","12.2.3","Apply separate privacy settings for each different type of profiling. Do not bundle different types of profiling together under one privacy setting."]
[12.2,"Age-appropriate information is provided at the point any profiling options are turned on to inform children what will happen to their personal information and highlight any risks inherent in that processing.","12.2.4","Apply a separate privacy setting for any behavioural advertising, except if this is your core service."]
[12.2,"Age-appropriate information is provided at the point any profiling options are turned on to inform children what will happen to their personal information and highlight any risks inherent in that processing.","12.2.5","Provide age-appropriate prompts to children to seek assistance from an adult and not to activate the profiling, if they are uncertain or don’t understand."]
[12.3,"Profiling is only undertaken when there are appropriate measures in place to protect the child from any harmful effects (in particular, when being fed online content or behavioural advertising that is detrimental to their health or wellbeing).","12.3.1","Implement measures such as contextual tagging, robust user reporting procedures, and elements of human moderation to your service."]
[{"$f":"A10","v":12.3},"Profiling is only undertaken when there are appropriate measures in place to protect the child from any harmful effects (in particular, when being fed online content or behavioural advertising that is detrimental to their health or wellbeing).","12.3.2","Continuously review new content streams or services, and the materials being suggested or provided, to ensure they remain age appropriate. "]
[12.3,"Profiling is only undertaken when there are appropriate measures in place to protect the child from any harmful effects (in particular, when being fed online content or behavioural advertising that is detrimental to their health or wellbeing).","12.3.3","Apply editorial controls over the content being displayed when profiling is done about what further online content to suggest to children. "]
[12.3,"Profiling is only undertaken when there are appropriate measures in place to protect the child from any harmful effects (in particular, when being fed online content or behavioural advertising that is detrimental to their health or wellbeing).","12.3.4","Operate a valid consent ‘opt in’ (for children under 13, from the parent or holder of parental responsibility) for any profiling you do for behavioural advertising that is not part of the core service that the child wishes to access."]
[12.3,"Profiling is only undertaken when there are appropriate measures in place to protect the child from any harmful effects (in particular, when being fed online content or behavioural advertising that is detrimental to their health or wellbeing).","12.3.5","Ensure that if you collect a child's personal information for one purpose, you do not use it for another, following profiling activities. "]
[12.4,"Where cookies are used for the purposes of profiling children, PECR rules are considered for the cookie setting. The profiling activities that the cookie supports or enables comply with the UK GDPR and the code.","12.4.1","Consider whether the cookie is for essential or non-essential processing. Apply an appropriate privacy setting, if the cookie isn’t essential to provide the service that the child wants to access."]
[{"$f":"A15","v":12.4},"Where cookies are used for the purposes of profiling children, PECR rules are considered for the cookie setting. The profiling activities that the cookie supports or enables comply with the UK GDPR and the code.","12.4.2","Keep evidenced consent for the cookie, as well as a UK GDPR lawful basis for processing (in practice this may also be consent)."]
[12.4,"Where cookies are used for the purposes of profiling children, PECR rules are considered for the cookie setting. The profiling activities that the cookie supports or enables comply with the UK GDPR and the code.","12.4.3","Evidence that the cookies you use for age estimation or age assurance are essential for your service. If you use the cookie  solely for this purpose,  then the child does not need to consent to the cookie."]
[12.4,"Where cookies are used for the purposes of profiling children, PECR rules are considered for the cookie setting. The profiling activities that the cookie supports or enables comply with the UK GDPR and the code.","12.4.4","Provide transparency information if you use non-essential cookies to track user interaction."]

{"sheet":"13. Nudge techniques","index":17,"n_rows":16,"n_cols":10,"rows_kept":16,"cut":false,"hidden":false,"merged":[[9,1,15,1],[5,1,8,1],[1,1,4,1],[1,0,4,0],[5,0,8,0],[9,0,15,0]]}
["Number","Our expectations","Reference","Ways to meet our expectations","Current Status","Reasons for Status","Actions","Action owner","Action Status","Due Date\n(DD/MM/YYYY)"]
[13.1,"Children are not led or encouraged to provide unnecessary personal information or turn off privacy protections.","13.1.1","Ensure design features do not lead or encourage children to follow your designer’s preferred paths, prompt them to disclose additional personal information, or turn off privacy settings."]
[{"$f":"A2","v":13.1},"Children are not led or encouraged to provide unnecessary personal information or turn off privacy protections.","13.1.2","Ensure the language you use to explain the outcomes of two alternatives is not framed more positively for one alternative than for the other."]
[13.1,"Children are not led or encouraged to provide unnecessary personal information or turn off privacy protections.","13.1.3","Check that the online service does not make one option much less cumbersome or time consuming than the alternative, therefore encouraging children to just take the easy option."]
[13.1,"Children are not led or encouraged to provide unnecessary personal information or turn off privacy protections.","13.1.4","Avoid exploiting unconscious psychological processes (eg associations between certain colours or imagery and positive outcomes, or human affirmation needs)."]
[13.2,"There is evidence that positive nudge techniques are deployed towards high privacy options, wellbeing enhancing behaviours and parental controls.","13.2.1","Implement techniques to positively nudge children towards supportive resources or provide tools (eg pause and save buttons)."]
[{"$f":"A6","v":13.2},"There is evidence that positive nudge techniques are deployed towards high privacy options, wellbeing enhancing behaviours and parental controls.","13.2.2","Conduct an independent assessment or user testing to confirm that your service does not accidentally nudge children down one path or route over another."]
[13.2,"There is evidence that positive nudge techniques are deployed towards high privacy options, wellbeing enhancing behaviours and parental controls.","13.2.3","Build clearly assigned points into your service where children are actively encouraged to speak to or seek the consent from their parents (or a responsible adult)."]
[13.2,"There is evidence that positive nudge techniques are deployed towards high privacy options, wellbeing enhancing behaviours and parental controls.","13.2.4","Include signposted or displayed encouragements for children to take a break from play or use."]
[13.3,"There has been a consideration of the impact of using dark nudge technologies to encourage desired behaviour or actions from children within the service for commercial benefit (eg in-game purchases).","13.3.1","Ensure children are not manipulated into making quick or rash decisions or purchases by being presented with a 'count down' offer or time expiring offer."]
[{"$f":"A10","v":13.3},"There has been a consideration of the impact of using dark nudge technologies to encourage desired behaviour or actions from children within the service for commercial benefit (eg in-game purchases).","13.3.2","Avoid presenting in-app purchases in a way that makes them appear as one-time-only offers or necessary purchases in order to progress in the game."]
[13.3,"There has been a consideration of the impact of using dark nudge technologies to encourage desired behaviour or actions from children within the service for commercial benefit (eg in-game purchases).","13.3.3","Ensure product badges, smart notifications and product recommendations are appropriate for the age of the child and are not used in an excessive way on children using the service."]
[13.3,"There has been a consideration of the impact of using dark nudge technologies to encourage desired behaviour or actions from children within the service for commercial benefit (eg in-game purchases).","13.3.4","Implement appropriate controls over any 'loot boxes' you use. Keep their use to a minimum and ensure they disclose the odds of receiving each type of item before purchase."]
[13.3,"There has been a consideration of the impact of using dark nudge technologies to encourage desired behaviour or actions from children within the service for commercial benefit (eg in-game purchases).","13.3.5","Ensure behavioural and psychographic information on children that you collect as a result of dark nudge techniques is collected lawfully. Avoid repurposing the information in a way that will mentally or physically harm the child, or for a different purpose (eg marketing new unrelated products or services)."]
[13.3,"There has been a consideration of the impact of using dark nudge technologies to encourage desired behaviour or actions from children within the service for commercial benefit (eg in-game purchases).","13.3.6","Consider the risks to children for any nudge techniques within your service in all your design decisions and DPIAs. "]
[13.3,"There has been a consideration of the impact of using dark nudge technologies to encourage desired behaviour or actions from children within the service for commercial benefit (eg in-game purchases).","13.3.7","Give children and parents the option to turn off in-app purchases, or behavioural advertising within the service, or reserve these options for a designated area behind a parental gate."]

{"sheet":"14. Connected toys & devices","index":18,"n_rows":13,"n_cols":10,"rows_kept":13,"cut":false,"hidden":false,"merged":[[1,1,6,1],[7,1,12,1],[1,0,6,0],[7,0,12,0]]}
["Number","Our expectations","Reference","Ways to meet our expectations","Current Status","Reasons for Status","Actions","Action owner","Action Status","Due Date\n(DD/MM/YYYY)"]
[14.1,"There is clarity provided on who is processing the personal information and what their responsibilities are for all connected toys and devices.","14.1.1","Make it clear in privacy information who will process the personal information that the toy or device transmits via the network connection and what their data protection responsibilities are."]
[{"$f":"A2","v":14.1},"There is clarity provided on who is processing the personal information and what their responsibilities are for all connected toys and devices.","14.1.2","Ensure appropriate contracts are in place that clearly outline controller and processor responsibilities if the online functionality or connected element of the toy or device is outsourced or ‘bought in’. "]
[14.1,"There is clarity provided on who is processing the personal information and what their responsibilities are for all connected toys and devices.","14.1.3","Provide clear information to indicate that the product processes personal information at the point of sale and before device set-up. "]
[14.1,"There is clarity provided on who is processing the personal information and what their responsibilities are for all connected toys and devices.","14.1.4","Ensure both the packaging of the physical product, and the product leaflet or instruction booklet (paper or digital), carry a clear indication (such as an icon) that the product is ‘connected’ and processes people’s personal information."]
[14.1,"There is clarity provided on who is processing the personal information and what their responsibilities are for all connected toys and devices.","14.1.5","Provide potential purchasers with the ability to view clear product privacy information, terms and conditions of use and other relevant information online, without having to purchase and set up the device first This means they can make an informed decision about whether to buy the device in the first place."]
[14.1,"There is clarity provided on who is processing the personal information and what their responsibilities are for all connected toys and devices.","14.1.6","Communicate ‘just in time’ information to the child or their parent, for example:\n- \tuse auto-play audio messages;\n- \tonly allow default settings to be changed by a support app; or \n- \tsupport interactive auto-bot ‘conversations’ with the user."]
[14.2,"There are appropriate technical security measures, including encryption in transfer, when using connected toys and devices.","14.2.1","Implement appropriate security measures to mitigate risks such as:\n- \tunauthorised access to information in transfer;\n- \t‘hacking’ of the device in order to communicate with the child (eg by taking over microphone capabilities); or \n- \tthe unauthorised tracking of their location. "]
[{"$f":"A8","v":14.2},"There are appropriate technical security measures, including encryption in transfer, when using connected toys and devices.","14.2.2","Provide multiple user profile options for people of different ages who use the device regularly (eg household members and frequent visitors to a household) to support use by adults, or to tailor the service to the age of a particular child."]
[14.2,"There are appropriate technical security measures, including encryption in transfer, when using connected toys and devices.","14.2.3","Include features that make it clear to the child or their parent when the device or toy is collecting personal information (eg a light that switches on when the device is audio recording, filming or collecting personal information in another way)."]
[14.2,"There are appropriate technical security measures, including encryption in transfer, when using connected toys and devices.","14.2.4","Clearly indicate when listening mode is active if the device uses a stand-by or ‘listening’ mode (eg it listens out for the name the parent or the child has given to the device, or for another key word or phrase to be used, and activates data collection when that word or phrase is used)."]
[14.2,"There are appropriate technical security measures, including encryption in transfer, when using connected toys and devices.","14.2.5","Avoid or prevent collecting personal information in listening mode."]
[14.2,"There are appropriate technical security measures, including encryption in transfer, when using connected toys and devices.","14.2.6","Introduce features that allow collection or listening modes to be easily switched off on the device itself (a ‘connection off’ button), or by online functionality options."]