Skip to content

Seven Data Protection Authorities. One Declaration. Two Binding Commitments On Children’s Data.

July 2, 20262 minute read

The G7 DPA roundtable — hosted by CNIL in Paris during France’s G7 presidency — adopted two formal documents this week. The first: a declaration on privacy-preserving age assurance, establishing principles for robust, rights-respecting, and interoperable age verification across jurisdictions. The second: a joint framework on children’s privacy and connected home devices, setting out expectations for manufacturers of devices intended for or accessible by minors.

This is not a position paper. It is a coordinated signal from the regulators with the largest enforcement budgets on the planet — CNIL, ICO, FTC, Garante, BfDI, PIPC, and PPC — that children’s data is now a shared enforcement priority.

The timing is deliberate. The ICO fined Reddit £14.47M in February for children’s privacy failures. The PIPC’s Coupang action included data on minors processed without age verification. Elkjøp enrolled 15-year-olds with no consent mechanism. The enforcement pattern is already established. The G7 declaration formalises what the individual actions already showed.

What this means for your compliance team:
→ Age assurance is moving from best practice to regulatory expectation. If your product or service is accessible to minors, you need a documented age assurance mechanism — not a checkbox.
→ Connected home devices are now explicitly in scope. Cameras, voice assistants, smart toys, and any device accessible to children in a home environment must meet the G7 framework’s privacy standards.
→ Interoperability means convergence. A standard that satisfies CNIL will be expected to satisfy ICO and FTC. Build once, defend across jurisdictions.
→ The FTC chairs the 2027 roundtable. Expect US enforcement to sharpen on children’s data.

At S8fe.ai, we help organisations assess whether their products and services meet cross-jurisdictional data requirements — before a G7 regulator asks the same question.

Seven regulators agreeing on the problem is a signal. Seven regulators agreeing on the framework is a deadline.

Source: https://www.cnil.fr/en/g7-2026-membership-and-outcomes

Share this article

Back To Top