Children today are growing up in a world where digital technology is woven into almost every aspect of daily life. From educational apps and online gaming to social media and AI, these technologies offer extraordinary opportunities for learning and connection. They also create important privacy and safety challenges for families. These concerns have received growing attention from governments and regulators, including recent federal efforts to strengthen protections for children who are using social media services and AI.
Privacy is often viewed as something that only becomes important after a data breach or cyberattack—but privacy is about much more than protecting information from criminals. It is about ensuring individuals, including children, retain an appropriate degree of control over their personal information and understand the potential consequences of sharing it in an increasingly digital world. This principle is reflected in privacy law through the concept of meaningful consent, which requires individuals to understand, to an appropriate degree, how their personal information will be collected, used, and disclosed before authorizing those practices. For children, meaningful consent presents unique challenges as younger users may not fully appreciate the long-term consequences of sharing personal information online.
Although Alberta does not have a standalone children’s privacy law, children’s personal information is currently protected through a combination of provincial and federal privacy legislation.1 Alberta’s Information and Privacy Commissioner has identified children’s privacy as a key priority, recognizing that children’s personal information deserves heightened protection. This reflects a growing national focus on these issues, and in June 2026, the Government of Canada introduced proposed legislation to strengthen protections for children’s personal information and give Canadians greater control over their data. Although not yet law, these trends signal growing recognition that children’s information requires enhanced protection.
Every interaction online contributes to a child’s digital footprint. Apps, games, streaming services, wearable devices, and connected toys may collect information such as names, photographs, location data, and browsing habits. Increasingly, this information is used to personalize content, recommend products, target advertising, and support the development of AI systems. Even seemingly harmless apps may collect significantly more information than is necessary to deliver their core service.
As AI is becoming part of many children’s everyday lives, from schoolwork to online learning. Although these interactions may feel private, information entered into AI platforms may be collected and retained.
Parents should encourage children not to share sensitive personal information on publicly available AI tools; social media encourages children and teenagers to share photographs, videos, opinions, and everyday experiences, often without appreciating how permanent that information may become. Even with privacy settings enabled, content can be copied or shared beyond its intended audience, creating a digital footprint that cannot be erased.
Parents should also think carefully about the information they share about their own children online. Family photographs or milestone announcements all contribute to a child’s digital footprint. Although shared with the best of intentions, these posts may remain online indefinitely and create a permanent record that the child did not choose for themselves. As children mature, involving them in decisions about what is appropriate to share online can help foster trust while encouraging thoughtful digital habits.
While privacy laws continue to evolve, families can take practical steps to reduce privacy risks:
• reviewing privacy settings before downloading new apps;
• limiting app permissions to only those that are necessary;
• encouraging children to think carefully before posting personal information or photographs online;
• having regular conversations about digital footprints, location sharing, online scams, and the appropriate use of AI; and
• modelling good digital habits.
Technology will continue to evolve, often outpacing the law. Meaningful protection cannot rely on legal reform alone. It requires informed choices by families, responsible practices by technology companies, and regulatory frameworks that adapt to emerging technologies. By helping children understand the value of their personal information from an early age, parents can help them enjoy the benefits of technology while safeguarding one of their most valuable assets: their privacy.
Tory Hibbitt, LLM, CIPP/C, is a Partner at Embury & West LLP, and leads the firm’s Health & Privacy Law practice. She is also co-author of the Annotated Alberta Health Information Act (LexisNexis, January 2026).
¹ Personal Information Protection Act, SA 2003, c P-6.5, Protection of Privacy Act, SA 2024, c P-28.5, Personal Information Protection and Electronic Documents Act, SC 2000, c 5 (PIPEDA). PIPEDA applies to interprovincial and international handling of Albertans’ personal information.
This article is provided for general information purposes only and does not constitute legal advice. The views expressed are solely those of the author and do not represent the views of her firm, clients, professional affiliations or this publication.
