a lot of their data is being collected through these, and potentially, in some cases, it's being misused. the code stops companies sharing data without a compelling reason, and makes them take account of the "best interests of the child". so if firms know they're dealing with an under—18, they now aren't allowed to share things automatically, like location or browsing history, unless these conditions are met. one of the sort of single most important principle within the children's code is to act in the best interest of the child. we see when it's working well, children are in control, have autonomy and have choice. when it isn't working well, when they may be exposed to harm, is when those platforms have taken away that and are manipulating children to have behaviours that are great for the platform, but may not be best for the child. social media platforms say they are changing the way they operate. facebook, instagram and youtube have now restricted the number of targeted ads to under—18s.