Children's online safety laws

Play this lesson

Laws for young players

Shard Garden has young players in many countries. Course 1 covered COPPA in the US. Two newer rules matter at this size, at the time of writing.

The UK's Online Safety Act

The UK government's explainer says the Act applies to "services that allow users to post content online". Platforms must "prevent children from accessing harmful and age-inappropriate content", "ensuring that child users have age-appropriate experiences".

Companies "can be fined up to £18 million or 10 percent of their qualifying worldwide revenue, whichever is greater."

Quick check

Kai asks: does the Act apply to Shard Garden's chat and shared levels?

  1. Yes: players post content there
  2. No: it is a game
  3. Only if players pay
Show the answer

Yes: players post content there

It covers services where users post content. Chat messages and shared levels are exactly that.

Whichever is greater

For a company with £50 million of qualifying worldwide revenue, 10% is £5 million. £18 million is greater, so £18 million is the maximum.

For a much bigger company, 10% would be the larger number.

Do the math

fine
qualifying worldwiderevenue: £400 million

What is the maximum fine?

  1. £40 million
  2. £18 million
  3. £4 million
Show the answer

£40 million

10% of £400 million is £40 million. That is greater than £18 million, so it is the maximum.

COPPA, updated in 2025

On 16 January 2025, the US Federal Trade Commission finalised changes to the children's privacy rule. They include "Requiring opt-in consent for targeted advertising and other disclosures to third parties", and keeping personal information only "for as long as reasonably necessary to fulfill a specific purpose".

Quick check

Under the 2025 changes, may Shard Garden share a child's data with an ad network for targeted ads without asking?

  1. No: it needs a parent's separate opt-in consent
  2. Yes, if the privacy policy mentions it
  3. Yes, if the child agrees
Show the answer

No: it needs a parent's separate opt-in consent

Disclosures to third parties, such as for targeted advertising, now need their own opt-in consent from a parent.

Check the latest

These laws change, and new ones arrive. Kai reviews them every year with a lawyer and a parent of a young player, and reads each regulator's own pages, not summaries.

And in the EU

The EU has its own law for platforms, with duties that grow with the company.

Bolt says: Next: the EU's Digital Services Act.

Fact-checked 12 October 2026