More websites, mobile apps for children collecting personal data, study finds

A global investigation involving Hong Kong authorities has found that more websites and mobile apps designed for children are collecting personal data – ranging from phone numbers to addresses – than they did about a decade ago.The 2025 Global Privacy Enforcement Network Sweep, which included the participation of Hong Kong’s Office of the Privacy Commissioner for Personal Data, examined 876 websites and mobile apps specifically designed for children across multiple sectors in early November, including education, gaming, social media and video streaming.“As the cognitive abilities of children are still developing, they may not fully understand their personal data privacy rights and are therefore more vulnerable to privacy risks arising from less privacy protective settings and design features of websites and mobile apps,” Privacy Commissioner for Personal Data Ada Chung Lai-ling said on Wednesday.The investigation found that while some platforms have adopted good practices to protect children and their personal data, more online services now require users to provide their personal data to access the full functionality of the platform compared with 2015, raising concerns about children’s privacy.Last year, 41 per cent of platforms required users to provide their names, up from 29 per cent in 2015. About 20 per cent needed to give their phone numbers, up from 12 per cent a decade ago.More platforms also asked for users’ addresses and photos or videos.As many as 85 per cent of the platforms indicated in their privacy policies that they may share children’s personal data with third parties, a substantial jump from 51 per cent in 2015.