The UK's Information Commissioner's Office issues a preliminary enforcement notice to Snap over its My AI chatbot possibly being a risk to children's privacy
Context & Ripple Effects
The ICO had already put apps and websites on notice through its children's privacy design code, creating a clear enforcement backdrop for products used by young people. Its earlier action against Clearview AI also showed the regulator was prepared to pair privacy findings with corrective demands.
This extends that scrutiny to a consumer AI feature embedded in a major social platform. A prior Italian order stopping Replika's local data processing over risks to minors illustrates how child-safety concerns were becoming a concrete constraint on chatbot deployment.
First-order effects
- Snap must respond to the ICO's preliminary concerns and defend how My AI handles children's data and privacy risks; the notice puts the feature's UK operation under immediate regulatory pressure.
- The ICO establishes an early test of whether its child-focused privacy expectations apply to generative-AI interactions, not only conventional app design.
Second-order effects
- Other platforms offering AI chat features to young users will have reason to review age-appropriate design, data handling, and risk assessments before regulators initiate similar proceedings.
- The case raises the compliance cost of rolling out chatbots inside social products, especially where companies cannot readily separate child and adult experiences.
Third-order effects
- If regulators continue treating chatbot interactions as a children's-data protection issue, AI product governance will increasingly be shaped by youth safeguards alongside model quality and engagement goals.
- The likely direction is overlapping scrutiny: privacy regulators can address data practices while platform-safety regimes examine protections for minors, as later inquiries into Snap's child safeguards indicate.
The trend: Consumer AI chatbots are becoming an enforcement surface where youth privacy, age assurance, and platform-safety obligations converge.