Ofcom: guidance on highly effective age assurance (Part 3) · The Data Protection Regime

The Data Protection Regime

chunk 47 · in force: unknown

Captured source text (L5)

The Data Protection Regime

5.3The UK data protection regime is made up of several pieces of legislation, including the Data Protection Act (“DPA”) 2018, the UK General Data Protection Regulation (UK “GDPR”), and the Privacy and Electronic Communications Regulations (“PECR”) 2003.

5.4Together, this legislation provides a risk-based framework for making sure the processing of personal data respects the fundamental rights and freedom of individuals. The Information Commissioner’s Office (“ICO”) is responsible for upholding information rights through its oversight and enforcement of the legislation.

5.5Service providers should consult ICO guidance when implementing age assurance to understand how to comply with the data protection regime, including its guides to the data protection principles, identifying an appropriate lawful basis, and how to respond to users exercising their individual rights afforded by the UK GDPR.38

5.6The PECR will apply to anyone who stores information on or gains access to information on a user’s device, for example, by using cookies or other similar technologies. Where an organisation stores, or gains access to, information on a user’s device, for example, by using cookies or other similar technologies, PECR will apply. The ICO has produced detailed guidance on this topic.

Full captured verbatim text

5.3 The UK data protection regime is made up of several pieces of legislation, including the
Data Protection Act (“DPA”) 2018, the UK General Data Protection Regulation (UK “GDPR”),
and the Privacy and Electronic Communications Regulations (“PECR”) 2003.

5.4 Together, this legislation provides a risk-based framework for making sure the processing of
personal data respects the fundamental rights and freedom of individuals. The Information
Commissioner’s Office (“ICO”) is responsible for upholding information rights through its
oversight and enforcement of the legislation.

5.5 Service providers should consult ICO guidance when implementing age assurance to
understand how to comply with the data protection regime, including its guides to the data
protection principles, identifying an appropriate lawful basis, and how to respond to users
exercising their individual rights afforded by the UK GDPR.38

5.6 The PECR will apply to anyone who stores information on or gains access to information on
a user’s device, for example, by using cookies or other similar technologies. Where an
organisation stores, or gains access to, information on a user’s device, for example, by using
cookies or other similar technologies, PECR will apply. The ICO has produced detailed
guidance on this topic.

What this provision means

Model summary, checked against the text on the left.

Relevance to Signicat: 2/3 · detailed summary (L4) Status: not needed for a short provision · Stored artifact; current recipe verification unavailable

Service providers implementing age assurance must consider data protection legislation and ICO guidance regarding personal data and device access.

Only the one-line summary above is stored for this provision; the text itself is the evidence.

Refers to

No captured references.

Referred to by

No captured references.

Part summaries

0 of 0 parts have a verified summary.

L1 unavailable for current verification: the overall summary needs every part verified. Provisions and the verified summaries remain readable.

Verification findings (79)

synthesis coverage: missing/unverified L2 guidance-on-highly

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#guidance-on-highly

synthesis coverage: missing/unverified L2 effective-age-assurance

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#effective-age-assurance

synthesis coverage: missing/unverified L2 for-part-3-services

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#chunk-3

synthesis coverage: missing/unverified L2 contents

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#section

synthesis coverage: missing/unverified L2 1-overview

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#chunk-5

synthesis coverage: missing/unverified L2 2-introduction

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#2-introduction

synthesis coverage: missing/unverified L2 background-to-the-guidance

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#children-s-access-assessment

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#protection-of-children-codes

synthesis coverage: missing/unverified L2 navigating-the-guidance

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#chunk-9

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#section-3-age-assurance-methods

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#section-4-criteria-to-ensure-an-age-assurance-process-is-highly

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#effective

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#section-5-privacy

synthesis coverage: missing/unverified L2 3-age-assurance-methods-and

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#3-age-assurance-methods-and

synthesis coverage: missing/unverified L2 processes

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#chunk-15

synthesis coverage: missing/unverified L2 kinds-of-age-assurance-that-are-capable-of-being-highly

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#kinds-of-age-assurance-that-are-capable-of-being-highly

synthesis coverage: missing/unverified L2 effective

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#chunk-17

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#chunk-22

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#chunk-23

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#chunk-24

synthesis coverage: missing/unverified L2 kinds-of-age-assurance-that-are-not-capable-of-being

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#kinds-of-age-assurance-that-are-not-capable-of-being

synthesis coverage: missing/unverified L2 highly-effective

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#chunk-19

synthesis coverage: missing/unverified L2 4-criteria-to-ensure-an-age

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#4-criteria-to-ensure-an-age

synthesis coverage: missing/unverified L2 assurance-process-is-highly

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#assurance-process-is-highly

synthesis coverage: missing/unverified L2 the-technical-accuracy-criterion

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#what-is-technical-accuracy

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#why-is-technical-accuracy-important

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#how-can-service-providers-have-regard-to-the-technical

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#accuracy-criterion

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#accuracy-criterion-2

synthesis coverage: missing/unverified L2 the-robustness-criterion

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#what-is-robustness

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#why-is-robustness-important

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#how-can-service-providers-have-regard-to-robustness-when

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#implementing-age-assurance

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#implementing-age-assurance-2

synthesis coverage: missing/unverified L2 the-reliability-criterion

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#what-is-reliability

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#why-is-reliability-important

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#how-can-service-providers-have-regard-to-reliability-when

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#implementing-age-assurance-3

synthesis coverage: missing/unverified L2 the-fairness-criterion

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#what-is-fairness

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#why-is-fairness-important

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#how-can-service-providers-have-regard-to-fairness-when

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#implementing-age-assurance-4

synthesis coverage: missing/unverified L2 additional-principles-for-providers-to-consider

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#chunk-43

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#accessibility-principle

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#interoperability

synthesis coverage: missing/unverified L2 5-privacy-and-data-protection

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#chunk-46

synthesis coverage: missing/unverified L2 the-data-protection-regime

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#chunk-47

synthesis coverage: missing/unverified L2 ico-guidance-on-data-protection-and-age-assurance

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#chunk-48

synthesis coverage: missing/unverified L2 having-regard-to-privacy-under-the-act

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#chunk-49

synthesis coverage: missing/unverified L2 6-technical-glossary

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#metrics-used-to-measure-the-accuracy-of-age-assurance

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#metrics-used-to-measure-the-accuracy-of-age-assurance-2

synthesis coverage: missing evaluation uk:ofcom/heaa-guidance-part3#additional-terms-used-in-this-guidance

Instrument tier unavailable

Change history as published

No captured publisher history.

Pending effects amendments not yet applied to this text

No captured pending effects.

Provenance

Every claim the system makes about this text is traceable to these identifiers.

Instrument: uk:ofcom/heaa-guidance-part3
Part: The Data Protection Regime
Version: eb000eee3d25f24ca2bee58c…
Content hash: sha256 4041ec82aad5a45f49361c44…
Source: ofcom.org.uk/siteassets/resources/documents/consultations/category-1-10-weeks/statement-protecting-children-from-harms-online/main-document/guidance-on-highly-effective-age-assurance-part-3-guidance-.pdf?v=396471