Ms Helen Dixon:

I think Ms Goguadze is well familiar with the fact that the GDPR is a high-level, technology-neutral, principles-based law. From our point of view, it is a very good platform over which we can regulate. All organisations, including the platforms, despite how large they are and the resources they have, have an issue understanding with any degree of certainty how these principles should be applied in specific scenarios. For example, the GDPR for the first time now in the EU calls out that children merit specific protections in a data protection context, but it really gives us no clues as to what those specific protections should look like. I mentioned earlier the challenge of even knowing how to identify children on platforms without limiting the rights of adult users or making platforms inaccessible. It is a challenging question. We find when we engage in exercises such as the consultation we have run on protections for children's data that the platforms are willing to come forward, make submissions and engage in ideas to ultimately find solutions that work across the board and drive up the levels of protection.