Risk · R-127 · Conduct & Customer Outcomes

Age-inappropriate AI interaction

Children and young people reach AI features that were designed for adults, without safeguards suited to their age.

Severity
Medium
Audience
Heads-of · Practitioner
Frameworks
Article 5(b) · PRIN 2A.3 · Obscene Content
Reviewed
2026-11-11

What it is

AI features are added to products that children already use, or are open to anyone who says they are old enough. A general-purpose assistant will discuss adult subjects, give confident guidance on health or relationships, and hold long personal conversations. Children are more trusting of such systems, less able to judge what they are told, and more open to forming attachments. UK law expects online products likely to be accessed by children to be designed with their interests in mind and to protect them from harmful content, whether or not children were the intended audience.

How it happens

  • No assessment was made of whether children are likely to use the feature.
  • Age is self-declared at sign-up and never checked.
  • The same model and settings serve all users.
  • Content filters were tuned for adult norms.

Why it matters

Exposure to unsuitable content, poor guidance or manipulative design can do real harm to a child. Regulators in data protection and online safety both treat children's use as a priority, and public reaction to failures is severe.

Warning signs

  • The product has a young user base and no age-appropriate mode.
  • The impact assessment does not mention children.
  • Conversations show signs of school-age users.
  • Parental complaints have been received.

Mitigating controls

Primary controls

AI impact assessment process Directive
Identifies whether children are likely to reach the feature and what safeguards follow. A structured assessment of an AI system's effect on individuals, groups and society is completed and signed off before deployment, and revisited when the system or its use changes.

Supporting controls

Content safety filtering Preventive
Applies stricter content limits where a child may be present. Inputs and outputs are classified against defined harm categories by a mechanism independent of the main model, and are blocked, modified or escalated according to policy.
Vulnerable customer safeguards Preventive
Treats age as a vulnerability indicator. Automated journeys detect indicators of vulnerability, adapt what they do, and route the customer to appropriate human support, with the disclosure recorded.

Framework and clause references

FrameworkClauseTitle
EU AI ActArticle 5(b)Exploitation of vulnerabilities Exploitation of age-related vulnerability.
FCA Consumer Duty (PRIN 2A)PRIN 2A.3Products and services outcome Target market.
NIST Generative AI Profile (NIST AI 600-1)Obscene ContentObscene, Degrading, and/or Abusive Content Content unsuitable for children.

Sources

EU AI Act: Regulation (EU) 2024/1689 European Union (EUR-Lex) · official text
NIST Generative AI Profile NIST · framework

How to cite

Axiom Verity (2026). Age-inappropriate AI interaction. Reference Library, R-127. https://axiom-verity.com/risks/age-inappropriate-ai-interaction. Reviewed 2026-11-11.