Risk · R-127 · Conduct & Customer Outcomes
Age-inappropriate AI interaction
Children and young people reach AI features that were designed for adults, without safeguards suited to their age.
- Severity
- Medium
- Audience
- Heads-of · Practitioner
- Frameworks
- Article 5(b) · PRIN 2A.3 · Obscene Content
- Responsible AI domain
- Lifecycle stage
- Reviewed
- 2026-11-11
What it is
AI features are added to products that children already use, or are open to anyone who says they are old enough. A general-purpose assistant will discuss adult subjects, give confident guidance on health or relationships, and hold long personal conversations. Children are more trusting of such systems, less able to judge what they are told, and more open to forming attachments. UK law expects online products likely to be accessed by children to be designed with their interests in mind and to protect them from harmful content, whether or not children were the intended audience.
How it happens
- No assessment was made of whether children are likely to use the feature.
- Age is self-declared at sign-up and never checked.
- The same model and settings serve all users.
- Content filters were tuned for adult norms.
Why it matters
Exposure to unsuitable content, poor guidance or manipulative design can do real harm to a child. Regulators in data protection and online safety both treat children's use as a priority, and public reaction to failures is severe.
Warning signs
- The product has a young user base and no age-appropriate mode.
- The impact assessment does not mention children.
- Conversations show signs of school-age users.
- Parental complaints have been received.
Mitigating controls
Primary controls
- AI impact assessment process Directive
- Identifies whether children are likely to reach the feature and what safeguards follow. A structured assessment of an AI system's effect on individuals, groups and society is completed and signed off before deployment, and revisited when the system or its use changes.
Supporting controls
- Content safety filtering Preventive
- Applies stricter content limits where a child may be present. Inputs and outputs are classified against defined harm categories by a mechanism independent of the main model, and are blocked, modified or escalated according to policy.
- Vulnerable customer safeguards Preventive
- Treats age as a vulnerability indicator. Automated journeys detect indicators of vulnerability, adapt what they do, and route the customer to appropriate human support, with the disclosure recorded.
Framework and clause references
| Framework | Clause | Title |
|---|---|---|
| EU AI Act | Article 5(b) | Exploitation of vulnerabilities Exploitation of age-related vulnerability. |
| FCA Consumer Duty (PRIN 2A) | PRIN 2A.3 | Products and services outcome Target market. |
| NIST Generative AI Profile (NIST AI 600-1) | Obscene Content | Obscene, Degrading, and/or Abusive Content Content unsuitable for children. |
Sources
- EU AI Act: Regulation (EU) 2024/1689 European Union (EUR-Lex) · official text
- NIST Generative AI Profile NIST · framework
How to cite
Axiom Verity (2026). Age-inappropriate AI interaction. Reference Library, R-127. https://axiom-verity.com/risks/age-inappropriate-ai-interaction. Reviewed 2026-11-11.
Found an error or a better source? Report a correction.