What is at stake¶

The thing at risk is not a child’s device or even their account. It is the raw material of a person before they have had a chance to shape it, and a record that will outlast the childhood it describes.

A durable identity¶

A child’s name, date of birth, face, and the identifiers tied to them are the root asset, and they have a quality an adult’s do not: they are being set for life while the person is too young to guard them. A date of birth and a full name captured at five are still valid at fifty. A face enrolled in a service in childhood is the same face a recognition system matches later. Unlike a password, none of this can be reset once it is out.

Images¶

Photographs and video of a child are both precious and exposed, and much of the exposure comes from people who love them. Images posted by parents and relatives, often tagged with a name, a place, and a date, build a public record a child never chose and cannot easily undo. The same images feed facial recognition, can be scraped, and in the worst cases are manipulated. The metadata riding inside a photo can give away a home or a school; the photos runbook covers stripping it.

Location and routine¶

Where a child is, and where they reliably will be, is unusually sensitive because the pattern is so fixed: home, school, the route between, the club on a Wednesday. Location sharing, geotagged posts, smart watches marketed for safety, and school apps together describe that routine in detail. It is the one asset where the safety rationale for collecting it is strongest and the risk if it leaks is also highest.

The social graph¶

Who a child knows, their friends, their family, their classmates, is both a map of their life and a map of other children. A single child’s contacts and group chats expose the people around them, few of whom had any say. This is why a breach of one child’s data is rarely contained to one child.

Room to grow¶

The least tangible asset is the hardest to price: the freedom to explore, to try on identities, to say something foolish, and to change, without all of it being recorded and held against a future self. A childhood conducted under observation, whether commercial or parental, narrows that room. The capacity to become someone different from who you were at fourteen depends partly on fourteen not being permanently on file.

The future adult¶

Finally, the asset that ties the others together: the adult this child will become, and the record that will greet them. A profile assembled across a childhood does not expire at eighteen. It informs what that adult is shown, offered, charged, and assumed to be. Protecting a child’s data is, in the end, protecting a person who does not exist yet from decisions being made about them now.

Last reviewed: 2026-07-08.