Official policy references

Child online safety, unwanted adult contact and privacy-preserving age assurance are active policy priorities.

These official sources help schools, service providers, researchers and policymakers evaluate where the UuLApp proposal fits. Links are informational; UuLApp is not a legal-compliance certification.

Adults taking part in a group discussion
European Union

Protection of minors and age assurance.

United States

Children’s privacy and age-verification policy.

Federal Trade Commission

Children’s Privacy / COPPA

Official FTC information and compliance resources on the Children’s Online Privacy Protection Rule.

FTC Children’s Privacy ↗
Federal Trade Commission · 2026

COPPA policy statement on age verification

Current FTC policy conditions for certain age-verification processing, including purpose limitation, limited retention, notice and security safeguards.

FTC policy statement ↗
NCMEC

National Center for Missing & Exploited Children

US child-safety organisation and CyberTipline resources relevant to online exploitation and child protection.

NCMEC ↗

Laws and regulatory guidance evolve. A production UuLApp implementation should undergo jurisdiction-specific legal review, security review and data-protection impact assessment where required.

European framework

What the law requires — and what UuLApp proposes.

UuLApp is an independent protocol proposal. It has not been presented as an EU-approved certification or a substitute for a provider’s legal obligations.

GDPR: lawful and limited processing

Child-safety purposes still need a lawful basis, proportionate processing, transparency, security and appropriate safeguards. A school’s existing records are not automatic permission for a new purpose.

GDPR — official text

DSA: appropriate, proportionate protection

Article 28 applies to the online platforms within its scope, with relevant exemptions. It includes a restriction on profiling-based advertising to known minors and does not itself oblige extra data collection to identify minors.

DSA — official text

Schools are one proposed trust source

EU rules do not prescribe school-only certification or a blanket ban on every adult-child interaction. UuLApp’s child-only spaces are a proposed safeguard; lawful professional and family contact needs separate, proportionate rules.

Commission guidance on minors

Age assurance must respect children’s rights

Necessity, proportionality, accessibility and fairness matter alongside safety. Verification should not enable cross-service tracking or unnecessarily exclude children without a participating school.

EDPB age-assurance statement

EDPB Guidelines 3/2025, final version of 17 September 2026: the DSA and GDPR must be applied consistently.

The legal scope and safeguards must be checked for each country, school and service before deployment. Technical testing and a lawful operating model are necessary; website wording alone cannot demonstrate compliance.