The Protection of Children (Digital Safety and Data Protection) Bill directs central government actors to produce three public outputs aimed at informing future policy on children’s online safety: guidance for parents and carers, a plan for research into social media’s effects on children, and an official assessment of whether children’s online experiences are age-appropriate and whether the digital age of consent should be increased. The measures are procedural — the Bill requires publication of documents and statements rather than imposing new duties on online services or changing the legal age of consent directly.
Why this matters: the Bill formalises a short, statutory evidence-gathering and advisory process that could underpin later regulatory or legislative change. For professionals in healthcare, education, regulation and data protection, it creates near-term deliverables to watch (and to which stakeholders will be asked to respond), while signalling that government is preparing to reassess the legal framework governing children's data and access to online services.
At a Glance
What It Does
The Bill requires government to publish three outputs within a set timetable: (1) advice for parents and carers prepared by the United Kingdom Chief Medical Officers; (2) a Secretary of State plan for research into the impact of social media on children; and (3) an assessment—published at the same time as the research plan—about whether children’s online experiences are age‑appropriate and whether the digital age of consent should be raised, with consultation specified for Ofcom and the Information Commissioner.
Who It Affects
Primary actors named are the UK Chief Medical Officers and the Secretary of State; the Bill also brings Ofcom and the Information Commissioner into the process as consultees. Secondary stakeholders include parents and carers, researchers and public‑health bodies that will be referenced by the research plan, and policy officials who may use the assessment to propose legal or regulatory changes.
Why It Matters
The Bill converts conversation into a formal, time‑bound evidence process that other authorities must acknowledge. By requiring a stated position on whether to increase the digital age of consent, it narrows the policy debate to a binary public statement that could precipitate follow‑on proposals—even though the Bill itself does not change the law or allocate research funding.
More articles like this one.
A weekly email with all the latest developments on this topic.
What This Bill Actually Does
Section 1 tasks the United Kingdom Chief Medical Officers with producing and publishing advice for parents and carers on children’s use of smartphones and social media. The requirement is procedural: the CMOs must prepare the guidance and “have regard to” a specified 2019 commentary and any subsequent scientific developments the CMOs consider relevant.
The Bill defines who counts as the UK CMOs (the CMOs for England, Wales, Scotland and Northern Ireland), which explicitly makes this a UK‑wide, coordinated medical advisory product.
Section 2 obliges the Secretary of State to publish a plan for research into the impact of social media use on children. The Bill requires publication of the plan within a fixed period after the Act’s passage, but it does not itself specify that the plan must be funded, nor does it prescribe the research design, timeline for delivery of research outputs, or who will carry out the work—only that a plan must exist and be published.Section 3 ties the research plan to an immediate policy assessment: on the same day the Secretary publishes the research plan, they must also publish an assessment of (a) whether children’s online experiences are age‑appropriate and (b) the appropriateness and effectiveness of the digital age of consent.
The Secretary of State must consult Ofcom and the Information Commissioner in preparing that assessment, and the assessment must contain an explicit statement on whether the digital age of consent should be increased. The Bill also defines “digital age of consent” by reference to article 8 of the UK GDPR, linking the assessment to the existing data‑protection framework.Section 4 confirms the Act’s UK territorial extent and makes the Act come into force on the day it is passed.
Taken together, the Bill mandates an evidence and advisory sequence—medical guidance, a research agenda, and a formal policy assessment—that could be used to justify future legal or regulatory changes even though this Bill itself stops at publication and does not directly alter legal rights or obligations.
The Five Things You Need to Know
The UK Chief Medical Officers must prepare and publish parental advice on smartphones and social media within 12 months of the Act being passed.
The Bill defines the ‘UK Chief Medical Officers’ as the CMOs for England, Wales, Scotland and Northern Ireland, requiring a UK‑wide coordinated product.
The Secretary of State must publish a plan for research into social media’s impact on children within 12 months of the Act coming into force.
On the same day the research plan is published the Secretary must also publish an assessment—after consulting Ofcom and the Information Commissioner—that includes a statement on whether the digital age of consent should be increased.
The Act extends to England, Wales, Scotland and Northern Ireland and comes into force on the day it is passed; it mandates publication only and does not itself change legal ages or create new statutory duties for platforms.
Section-by-Section Breakdown
Every bill we cover gets an analysis of its key sections.
CMOs must publish parental advice on smartphones and social media
Section 1 creates a single, time‑bound duty for the UK Chief Medical Officers to prepare and publish advice for parents and carers within 12 months. Practically, the CMOs must coordinate across the four national offices and exercise professional judgment about content, evidence thresholds and tone. The statute instructs them to “have regard to” a specified 2019 commentary and any subsequent scientific or other developments, but it leaves the substance, format, dissemination strategy and follow‑up entirely to the CMOs’ discretion—so the practical impact will depend on choices about reach, accessibility and alignment with health‑promotion channels.
Secretary of State must publish a research plan on social media’s impact
Section 2 requires the Secretary of State to publish a plan for research into the impact of social media use on children within the same 12‑month window. The provision mandates a documented strategy rather than commissioning or funding specific studies. That means the plan can set priorities, identify gaps, propose methodologies and name responsible bodies, but the Bill does not compel follow‑through financing, procurement or delivery schedules—leaving a risk that publication becomes a precursor to later action rather than the action itself.
Assessment of age‑appropriateness and the digital age of consent, with specified consultees
Section 3 requires the Secretary of State to publish an assessment at the same time as the research plan. The assessment must evaluate whether children’s online experiences are age‑appropriate and whether the digital age of consent (defined by reference to article 8 of the UK GDPR) is appropriate and effective, and it must state whether the age should be increased. The Secretary must consult Ofcom and the Information Commissioner when preparing the assessment; the consultative list is limited to those two regulators, which shapes the evidence and legal framing the Secretary will use to reach a conclusion.
Territorial extent and commencement
Section 4 states that the Act extends across England and Wales, Scotland and Northern Ireland and that it comes into force the day it is passed. There are no staged commencements or secondary instruments contemplated by the Bill—its operational effect is immediate and limited to the publication duties it creates.
This bill is one of many.
Codify tracks hundreds of bills on Privacy across all five countries.
Explore Privacy in Codify Search →Who Benefits and Who Bears the Cost
Every bill creates winners and losers. Here's who stands to gain and who bears the cost.
Who Benefits
- Parents and carers — they receive a centrally prepared, UK‑wide set of medical advice intended to guide decisions about smartphone and social media use for children.
- Public‑health and child‑welfare professionals — a unified CMO product can inform clinical advice, school health programmes and public guidance, reducing inconsistent messaging across the UK nations.
- Researchers and academic institutions — the statutory requirement for a research plan creates a visible agenda and potential focal points for funding bids and study design, helping align academic work to government priorities.
- Regulators (Ofcom and the Information Commissioner) — being named consultees gives them early influence over the assessment’s framing and ensures their evidence and legal analysis will inform the Secretary’s public position.
- Policymakers and legislative drafters — the assessment’s required statement on whether to raise the digital age of consent supplies a clear trigger and evidence base for future policy proposals.
Who Bears the Cost
- The Secretary of State’s department — it must resource the preparation, coordination and publication of a research plan and an assessment, and manage consultations with regulators; those are administrative costs that could require civil‑service time and possibly commissioned analysis.
- UK Chief Medical Officers’ offices — they must draft, coordinate and publish guidance within a fixed deadline, which will consume public‑health capacity and may require stakeholder engagement and communication resources.
- Ofcom and the Information Commissioner’s offices — the Bill requires consultation, which imposes a duty to respond and may require allocation of staff time and evidence‑gathering resources.
- Research funders and departments — because the Bill mandates only a plan rather than funded studies, public bodies may face pressure to allocate new research budgets if the plan identifies significant evidence gaps.
- Policymakers and legal teams — if the assessment recommends raising the digital age of consent, departments will face the downstream cost of drafting, consulting on and implementing legislative or regulatory change.
Key Issues
The Core Tension
The Bill prioritises a fast, evidence‑oriented response—publishing guidance and an assessment—over committing resources or specifying substantive legal changes, creating a tension between the desire for quick, authoritative action to protect children and the reality that meaningful change (research, funding, statutory reform) requires time, resourcing and clear criteria that the Bill does not supply.
The Bill is tightly focused on publication duties and leaves critical implementation choices unspecified. It sets a 12‑month deadline for publishing guidance and a research plan but does not require that the research be commissioned, funded, or completed on any timetable; that gap creates a risk the ‘plan’ becomes a nominal deliverable rather than the start of substantive evidence production.
The statutory instruction that the CMOs must “have regard to” a 2019 commentary and subsequent developments constrains neither how the CMOs weigh evidence nor which disciplines must be represented in the guidance—raising questions about methodology, transparency and representativeness.
The assessment requirement creates further ambiguities. By limiting mandatory consultation to Ofcom and the Information Commissioner, the Bill channels the assessment through regulatory and legal lenses but excludes other expert communities by design (for example, child psychologists, educators, social‑work practitioners and representative groups).
The statutory demand for a binary statement on whether the digital age of consent should be increased forces a public policy position without prescribing criteria or thresholds for making that determination, potentially politicising what should be a multi‑dimensional scientific and ethical judgement. Finally, because the Bill defines the ‘digital age of consent’ by reference to article 8 of the UK GDPR, the assessment will be anchored to an existing legal framework but the Bill provides no mechanism to translate a recommendation into legal change—leaving a disconnect between diagnosis and remedy.
Try it yourself.
Ask a question in plain English, or pick a topic below. Results in seconds.