📜 Child Rights Impact Assessment (CRIA)

The platform provides no evidence of ex-ante algorithmic bias testing or fairness audits across its automated LearnerProfile and AI profiling systems, creating severe discriminatory risks for neurodivergent and SEND pupils. Profiling mechanisms such as writing pressure logging and reading velocity tracking inherently penalize children with physical or cognitive impairments without reasonable adjustments. Furthermore, automated sorting of older pupils into university marketing streams risks entrenching socioeconomic sorting without safeguards against algorithmic bias.

Mitigations

Commercial objectives and platform engagement metrics are systematically prioritized over the best interests of child users, violating GC No. 25 paragraph 12. Deploying live high-risk algorithmic profiling and Wellbeing Pulse emotional tracking while operating without an ex-ante child-specific DPIA demonstrates an acute disregard for child welfare. Furthermore, Section 3.7 and Appendix A mandate non-consensual commercial consortium data sharing under legitimate interests, directly subordinating child rights to commercial revenue streams.

Mitigations

The deliberate deployment of persuasive design techniques—including daily login streaks, automated 7pm loss warnings, and AI-calibrated notifications—infringes upon children's holistic physical, mental, and emotional development. These gamified retention triggers are engineered to induce compulsive screen-time habits and evening platform engagement at the direct expense of healthy sleep patterns and restorative rest. In contrast to the positive escalation of safeguarding alerts via Section 3.4, the platform's overarching behavioral mechanics actively exploit developmental vulnerabilities for platform stickiness.

Mitigations

Persistent LearnerProfile telemetry and behavioural profiling construct non-consensual algorithmic identities that follow students across their educational careers without their consent or remediation rights. Unverified date-of-birth self-declaration compromises identity integrity, while the absence of privacy-preserving age assurance leaves children under 16 subject to commercial data capture. Children are denied the agency to alter, contest, or separate their authentic identity from commercialized and algorithmic platform reputations.

Mitigations

The platform completely suppresses children's agency and participation by explicitly forbidding users under 16 from modifying privacy settings or exercising data subject rights. Rectification, erasure, and access rights are locked behind adult-oriented legalistic barriers, including mandatory identity documentation and an unlawful £10 fee, disenfranchising the child's evolving capacities. The total absence of student feedback loops or representation in platform governance violates the core mandate of GC No. 25 regarding children's digital participation.

Mitigations

While PeerSpace technically affords collaborative communication opportunities, mandatory algorithmic content recommendation and persistent profiling constrain children's autonomous exploration and diversity of expression. Children cannot opt out of algorithmic personalization or social visibility defaults without sacrificing fundamental access to mandatory educational resources. This creates an echo-chamber effect that shapes their informational access based on automated tracking rather than autonomous intellectual inquiry.

Mitigations

Section 10.2 facilitates unlawful covert surveillance by permitting guardians to secretly inspect historical Wellbeing Pulse ratings and EngagementScore metrics without child notification. Privacy is further eroded by Section 14 LearnPad hardware harvesting ambient classroom audio, stylus pressure biometrics, and reading velocity by default without consent or toggles. Default-open visibility and commercial tracking consortia partnerships fundamentally compromise the private digital sphere protected by Article 16.

Mitigations

The privacy notice violates Article 17 and GC No. 25 transparency standards by relying exclusively on dense legalistic text with zero age-stratified or multimodal explanatory layers. The service steers children into privacy-invasive defaults through manipulative browsewrap consent notices and pre-ticked cookie categories in violation of basic transparency duties. Children are deprived of accessible information necessary to make informed developmental choices about their personal data and rights.

Mitigations

Section 3.4 demonstrates positive harm-prevention through automated escalation of severe safeguarding risks to school Designated Safeguarding Leads. However, this protective mechanism is severely counteracted by structural commercial exploitation, including automated routing of 16-17 year-olds into university marketing funnels and commercial data sharing. Furthermore, default public peer visibility on PeerSpace exposes child users to peer abuse, harassment, and unauthorized contact without adequate boundary controls.

Mitigations