§8.1 Governance (general)

84. The Commission considers that providers of online platforms accessible to minors should put in place effective governance practices as a means of ensuring a high level of privacy, safety and security for minors on their services for the purposes Article 28(1) of Regulation (EU) 2022/2065. This includes, but is not limited to: (a) Implementing internal policies that outline how the provider of the online platform seeks to ensure a high level of privacy, safety and security for minors on its service. (b) Assigning to a dedicated person or team the responsibility for ensuring a high level of minors’ privacy, safety and security. This person or team should have sufficient resources as well as sufficient authority to have direct access to the senior management body of the provider of the online platform and should also be a central point of contact for regulators, users and trusted flaggers in matters related to minors’ privacy, safety and security. (c) Fostering a culture of privacy, safety and security for minors on the service. This includes: (i) Fostering and prioritising a culture of child participation in the design and functioning of the platform. This should be done in safe, ethical, inclusive and meaningful ways, in children’s best interests, and should provide for feedback mechanisms to explain to minors how their views have been taken into account (91). (ii) Raising awareness of how the provider upholds children’s rights on its platform and the risks that minors on the platform may face to their privacy, safety and/or security (92). (iii) Providing persons responsible for minors’ privacy, safety and security, developers, persons in charge of moderation and/or those receiving reports or complaints from minors, with relevant training and information (93). (iv) Having procedures to ensure regular monitoring of compliance with Article 28(1) of Regulation (EU) 2022/2065. (v) Ensuring that any technological and organisational solutions employed to implement these guidelines are ‘state-of-the-art’ and are aligned with national guidance on the protection of minors (94), children’s rights and the highest available standards (95). (vi) Putting in place a process for the regular collection and recording of data on harms and risks related to privacy, safety, and security of minors on the platform, which should be periodically reported to the provider’s management as well as to the person or team designated for the protection of minors. This is without prejudice to the obligations of providers of VLOPs and VLOSEs stemming from Articles 34 and 35 of Regulation (EU) 2022/2065. (vii) Exchanging between platforms and providers, as well as with Digital Services Coordinators, trusted flaggers, civil society organisations, academia and other relevant stakeholders, good practices and technological solutions that are aimed at ensuring a high level of privacy, safety and security for minors. Cross-platform collaboration should include risk detection, design standards, and research collaboration with trusted actors.

← 8 · All articles · 8.2 →

Source: EUR-Lex (Cellar) · retrieved 2026-09-07