IEEE 2089-2021

This standard is the first in a family of standards focused on the 5Rights principles and establishes a set of processes for developing age appropriate digital services for situations where users are children. The framework centers around the following key areas as follows: a) Recognition that the user is a child b) Consideration for the capacity of and upholds the rights of children c) Offers terms appropriate to children d) Presents information in an age appropriate way e) Offers a level of validation for service design decisions This standard provides a specific impact rating system and evaluation criteria and explains how vendors, public institutions, and the educational sector can meet the criteria. This standard sets normative requirements for published terms, design, and delivery that can recognize and respond to the needs of children and young people. Data privacy and security are complex and highly regulated areas of law, particularly as related to children and young people. The relevant legal definitions and requirements are rapidly evolving, and may vary at the local, state, national, and regional level. No standard can provide unconditional consistency with all such laws and regulations. Users of this standard are responsible for referring to and observing all applicable legal and regulatory requirements, and should refer questions of compliance to competent legal counsel with expertise in the relevant jurisdiction.