IEEE 2089-2021 Age Appropriate Design Framework
Standards for AI systems interacting with children, including privacy and safety requirements.
| Category | Technical Standards |
|---|---|
| Status | Active |
| Latest development |
Analysis
Key Requirements
- Recognition that the user is a child: Organizations must identify when their users are children and adapt their systems accordingly, ensuring all interactions, data handling, and content are suitable for minors. This includes both direct and indirect engagement with children, requiring proactive measures to assess and address child users’ needs. IEEE 2089-2021 Official Standard | Full Standard PDF
- Acknowledgement of the diversity of children and young people: The standard requires consideration of the varied developmental stages, backgrounds, and abilities of children, ensuring that services are inclusive and accessible to all. IEEE 2089-2021 Official Announcement | 5Rights Foundation
- Presentation of information in an age-appropriate way: All information, including privacy notices and terms, must be communicated in language and formats that children can understand, supporting informed decision-making. IEEE 2089-2021 Official Standard | IEEE SA Trustworthy Digital Experiences
- Utilization of fair terms appropriate for children: Contracts, terms of service, and consent mechanisms must be fair, transparent, and tailored to the comprehension levels of children, avoiding exploitative or overly complex language. IEEE 2089-2021 Official Announcement | IEEE SA Trustworthy Digital Experiences
- Prioritization of children’s best interests over commercial interests: The standard mandates that the welfare and rights of children take precedence over business objectives, particularly in areas such as data monetization, profiling, and targeted advertising. IEEE 2089-2021 Official Standard | Full Standard PDF
- Risk mitigation and management throughout the product lifecycle: Organizations must assess, manage, and mitigate risks to children’s privacy, safety, and well-being at every stage of product and service development, delivery, and distribution. IEEE 2089-2021 Official Announcement | IEEE SA Trustworthy Digital Experiences
Compliance Challenges
- Complexity of age verification: Accurately identifying child users without collecting excessive personal data is technically and ethically challenging. Many organizations struggle to implement robust, privacy-preserving age verification systems. IEEE SA Age Verification Program | IEEE SA Trustworthy Digital Experiences
- Balancing privacy with personalization: Delivering engaging, personalized experiences while minimizing data collection and profiling of children is a persistent challenge, especially for AI-driven platforms. IEEE 2089-2021 Official Standard | Full Standard PDF
- Adapting legacy systems: Retrofitting existing products and services to meet age-appropriate design standards can be resource-intensive and may require significant redesigns. IEEE 2089-2021 Official Announcement | How to Design a Digital World Where Children Can Thrive
- Case Example: The gaming industry has faced scrutiny for insufficient age verification and inappropriate in-game advertising targeting children, leading to regulatory investigations and forced product changes. IEEE SA Trustworthy Digital Experiences | How to Design a Digital World Where Children Can Thrive
Implementation Best Practices
- Conduct child impact assessments: Evaluate how products and services affect children at every stage, identifying and mitigating risks early. Full Standard PDF | IEEE 2089-2021 Official Standard
- Integrate age-appropriate design into development lifecycles: Embed child-centric considerations into product design, engineering, and testing processes. IEEE SA Trustworthy Digital Experiences | IEEE 2089-2021 Official Announcement
- Use clear, accessible communication: Develop privacy notices, terms, and user interfaces that are understandable to children of different ages and abilities. IEEE 2089-2021 Official Standard | IEEE SA Trustworthy Digital Experiences
- Leverage certification and assessment tools: Utilize programs such as the IEEE Online Age Verification Certification Program to validate compliance.
- Reference implementation guides: Consult the 5Rights Foundation’s resources and IEEE SA’s trustworthy digital experiences initiative for detailed frameworks and checklists.
Recent Updates
- IEEE 2089.1-2024 Standard for Online Age Verification: Published in 2024, this standard provides a framework for designing, specifying, evaluating, and deploying age-verification systems, complementing the original IEEE 2089-2021 framework. IEEE SA Age Verification Program | IEEE SA Trustworthy Digital Experiences
- Ongoing development of related standards: New projects such as IEEE P2089.2 (Terms and Conditions for Children’s Online Engagement) and IEEE P2089.3 (Online Parental Consent) are underway, expanding the regulatory landscape. IEEE SA Trustworthy Digital Experiences
- Effective dates: IEEE 2089-2021 was published on November 30, 2021. IEEE 2089.1-2024 became effective in 2024. Compliance deadlines are determined by organizational adoption and regulatory requirements in relevant jurisdictions. IEEE 2089-2021 Official Announcement | IEEE SA Age Verification Program
Related Regulations
- UK Age Appropriate Design Code (Children’s Code): The UK’s statutory code for online services likely to be accessed by children, with significant overlap in principles and requirements. UK ICO Children’s Code
- UN Convention on the Rights of the Child (CRC): IEEE 2089-2021 is explicitly informed by the CRC, embedding its principles into digital design. UN CRC Official Text
- IEEE 7000 Series (AI Ethics and Data Governance): Related standards on ethical AI and data governance, providing complementary frameworks for responsible technology development. IEEE 7000 Series
- Interaction and overlap: IEEE 2089-2021 aligns with these frameworks by emphasizing children’s rights, privacy, and safety, and can be used in conjunction with national laws and sector-specific regulations. IEEE 2089-2021 Official Standard | IEEE SA Trustworthy Digital Experiences
Industry Impact
- Technology and digital service providers: Must redesign products and services to comply with age-appropriate standards, impacting user interface design, data collection practices, and business models. IEEE 2089-2021 Official Announcement | How to Design a Digital World Where Children Can Thrive
- Gaming and social media: Face increased scrutiny and operational changes, particularly around advertising, in-app purchases, and community moderation. IEEE SA Trustworthy Digital Experiences | IEEE 2089-2021 Official Standard
- AI system developers: Required to implement child-centric risk assessments and safeguards, influencing AI model training, deployment, and monitoring. IEEE 2089-2021 Official Standard | Full Standard PDF
- Industry analysis: The standard is recognized as a major step toward ethical, child-centered digital innovation, with growing adoption across sectors. IEEE 2089-2021 Official Announcement | How to Design a Digital World Where Children Can Thrive
Sources
- IEEE 2089-2021 Official Standard
- Full Standard PDF (5Rights Foundation)
- IEEE 2089-2021 Official Announcement
- IEEE SA Trustworthy Digital Experiences
- IEEE SA Age Verification Program
- How to Design a Digital World Where Children Can Thrive
- UK ICO Children’s Code
- UN CRC Official Text
- IEEE 7000 Series
Recent developments
- — A major panel at EuroDIG 2025 discussed the future of age assurance in the context of the UK’s Online Safety Act rollout and the EU’s exploration of an Age-Appropriate Design Code, highlighting the influence of IEEE 2089-2021 on global policy debates and technical implementation challenges.[5] (source)
Related regulations
- Framework Convention on Artificial Intelligence, Human Rights and Democracy — Technical Standards, Active
- OECD Framework for Classifying AI Systems — Technical Standards, Active
- IEEE P7003: Algorithmic Bias Considerations — Technical Standards, Active
- IEEE P2863: Organizational Governance of Artificial Intelligence — Technical Standards, Active
- ISO/IEC 23894: Information Technology — Artificial Intelligence — Risk Management — Technical Standards, Active
- Harmonized Standards for EU AI Act Compliance — Technical Standards, Active
- Development Security Operations Framework — Technical Standards, Active
- Center for Internet Security Critical Security Controls — Technical Standards, Active
Put it into practice
- Generate the policy: ISO 27001 policy generator (generatepolicy.com)
- Buy the policy pack: ISO 27001 Complete Bundle (cyberpolicy.shop)
- Build it yourself: Pillar 01 Companion — The Living ISMS (ciso.diy)
Browse all regulations · Compliance deadlines · Latest updates