Ms Clare Daly:

In respect of the availability of data protection enforcement in the context of regulation here, the UK has a designated children's code and in Ireland we had a fundamental code for the processing of children's data, but we could look at that going further in Ireland. In the US, for example, the Federal Trade Commission issued an algorithmic deletion demand in 2022 concerning a mobile phone app designed for use by children that violated the US Children’s Online Privacy Protection Act in the case United States of America v. Kurbo, Inc. It was found that children's data had been used to train the company’s algorithms but that the company had failed to notify parents. Given the GDPR is in existence, we could seek to rely on it a bit more strongly, as Dr. Ryan pointed out in his submissions. Perhaps the Data Protection Act in Ireland could be looked at in that regard, with a similar code to the children's code in the UK being considered.