UK Age Appropriate Design Code (Children's Code) Standard 9: Standard 9: Data sharing

Do not disclose children's data, including inferred data or making it visible to third parties or within the group, unless there is a compelling reason in the child's best interests (for example safeguarding, preventing child sexual exploitation or detecting crimes against children; selling data for commercial reuse is unlikely to qualify); do not share where detrimental use by the recipient is foreseeable, obtain assurances and do due diligence on recipients, and make any sharing settings specific as to purpose and recipient rather than general.