儿童安全和福祉在线年龄保障的法律和政策前景（英）_189页_2mb

报告摘要

Summary of the Legal and Policy Landscape of Age Assurance Online for Child Safety and Well-Being

Core Content

This report provides an analysis of the legal and policy landscape for age assurance across OECD Member countries. Age assurance is defined as a mechanism to determine whether an online user is a child, ensuring they receive age-appropriate services and are protected from harmful or inappropriate content and services. The paper maps the legal frameworks that establish age-dependent protections or obligations and highlights the interactions between different legal regimes (e.g. online safety, privacy, and age-restricted goods).

The report categorizes age assurance laws and policies into three main areas:

Age-appropriate service delivery
Hard age limits
Privacy and data protection legal frameworks

Main Findings

1. Age-Appropriate Service Delivery

Laws in 28 OECD Member countries require digital service providers to implement age assurance mechanisms to deliver services tailored to children's needs.
These laws are typically found in online safety legislation and apply to services with a mixed age user base.
Some countries are developing enforceable implementation guidance, which may lead to express age assurance requirements for different age cohorts.
Age assurance is often implied, meaning that the need to determine a user's age is not explicitly stated but is necessary for compliance with age limits.
The focus is on harmful content, although not all countries define this term.
A growing trend is the specific regulation of children's access to social media, with some countries considering or implementing social media-specific age limits.

2. Hard Age Limits

Only 23 OECD Member countries have laws that specifically prohibit children's access to pornography online.
Of these, only five include detailed age assurance requirements.
Seven countries do not mention age assurance at all in their laws.
The role of age rating schemes is significant, but they are not always backed by research or transparent in their processes.
Age assurance for online purchases of age-restricted goods (e.g. alcohol, cigarettes, knives) is limited and often lacks specificity.

3. Privacy and Data Protection Legal Frameworks

Twenty-seven OECD Member countries have legal provisions requiring special protection for children's data.
Thirty-three countries require parental consent for processing children's data.
Age limits for special protection range from under 13 to under 18, with 26 countries applying it to users under 18 and one to users under 13.
Parental consent age limits are highly variable, ranging from 13 to 18.
Privacy concerns are raised around the use of data-intensive age assurance solutions, such as biometrics and profiling, which may conflict with data protection principles.
Self-declaration and verified parental consent are common methods, but they are not always reliable or effective.

Key Challenges and Observations

Fragmentation of laws and policies across jurisdictions creates complexity and uncertainty in implementing age assurance.
Implied requirements are common, but they may be difficult to enforce without clear guidance.
Parental involvement in age assurance is controversial, with some parents bypassing age checks due to a lack of understanding.
Digital transformation has reduced the effectiveness of traditional age safeguards, such as geographical restrictions or time-based bans.
Regulatory action is increasing, particularly in the United States, where sub-national laws are proliferating and have a significant impact on global digital service providers.

Guidance for Implementation

Implementation guidance is emerging in some OECD countries, with regulators forming working groups and providing targeted advice.
Technical solutions are being explored, but their accuracy, effectiveness, and privacy implications need to be demonstrated.
Industry initiatives are also contributing, such as the Digital Trust and Safety Partnership developing best practice guidance for age assurance.

Conclusion

This report serves as a companion to an industry benchmarking study and aims to inform future research on technical solutions and the appropriateness of current age limits. It is intended to support government and industry action to ensure children benefit from digital technologies while being protected from harm and respected in their rights and freedoms.

Key Information

Age assurance is a critical tool for ensuring child safety and well-being in digital environments.
Three categories of laws and policies are identified: age-appropriate service delivery, hard age limits, and privacy/data protection.
OECD Member countries have varying legal age limits and age assurance requirements.
Implementation guidance is growing, but specificity and clarity remain challenges.
Sub-national laws, particularly in the United States, are playing a significant role in shaping the global age assurance landscape.

References and Tables

The report includes tables summarizing express and implied age assurance requirements across different legal regimes.
Annexes provide detailed information on age assurance laws and policies related to:
- Online harms
- Social media access
- Access to pornography
- Privacy and data protection
- Sale of age-restricted goods