Children Data Protection Policy on Online Learning Platforms in Indonesia and UK: Case Study of EdTech Companies
- Mixed Methods research
- Cyberbullying
- Children data protection
- Data privacy
- General Data Protection Regulation (GDPR)
- Personal Data Protection (PDP)
- Document analysis
Data privacy has become a critical concern among internet users in the digital era due to emerging threats like cyberbullying and data breaches. Notably, children are vulnerable targets in the online world due to their limited consent understanding and media literacy. However, the adequacy of data protection policies for children remains uncertain. This research examines the implementation of children's data protection policies in specific countries and organizations with the aim of providing recommendation about children’s data privacy and privacy notices. The selected countries are Indonesia and the UK, known for having a significant number of internet users. The main focus is on two prominent online learning platforms for children: Ruangguru in Indonesia and BBC Bitesize in the UK. Afterwards, document analysis of the General Data Protection Regulation (GDPR)/Data Protection Act 2018 (DPA) in the UK and the Personal Data Protection (PDP) in Indonesia serves as the primary data source. Privacy notices from the respective companies are analysed to gain insights into their data protection practices. The findings reveal that the GDPR/DPA 2018 appropriately facilitates data protection for children, while the PDP exhibits several gaps. In the case of BBC Bitesize, concerns regarding children's privacy are evident in its privacy notice, while Ruangguru's notice lacks specificity.
Based on the findings, this research presents recommendations to address the identified gaps and enhance data protection for children on online learning platforms.