CyprusRadio and Television Organisations Law, Article 32ΣΤ (Video-Sharing Platform Age Verification)
In force since .
An adult content age verification (AV) rule binding private bodies.
- How the hook was established
- express
- What makes it apply
- Operator establishment
- Audit expectation
- on_request
- Who audits it
- Regulator
What it requires
- Applies to video-sharing platform providers under the jurisdiction of Cyprus.
- Take appropriate measures to protect minors from content that may harm their physical, mental or moral development, including installing and operating age-verification systems for platform users in relation to that content.no control in the NIST Privacy Framework
- Do not process minors' personal data collected under these measures for commercial purposes such as direct marketing, profiling or behavioural advertising.NIST Privacy FrameworkCT.PO-P1
These lines are LexLint's reading of the law's text.
In the frameworks
- NIST Privacy Framework
- CT.PO-P1Policies, processes, and procedures for authorizing data processing (e.g., organizational decisions, individual consent), revoking authorizations, and maintaining authorizations are established and in place.
Our reading of where this law's duties sit in each framework, and in the NIST Privacy Framework, line by line beside each duty above. It never says that running a control meets the law. How we read a framework against the law
If you get it wrong
Penalty structure
Article 32Ζ(2)(ε): an administrative fine not exceeding 5% of the video-sharing platform provider's turnover for the preceding financial year, or an administrative fine not exceeding 500,000 euros. The text states the two figures as alternatives, without a rule for combining them.
- Rule
- Higher of
- As of
- Currency
- EUR
- Fixed cap
- 500,000
- Turnover percentage cap
- 5
Who enforces it
Enforcement body
Cyprus Radio Television Authority (Αρχή Ραδιοτηλεόρασης Κύπρου)
Settledness
- As of
- Open questions
- Which of the measures in paragraph (8) of Article 32ΣΤ, including the age-verification systems in subparagraph (στ), must a given video-sharing platform provider apply, when paragraph (7) makes the measures depend on whether they are 'εφικτά και αναλογικά' (feasible and proportionate) for the size and kind of the service?
What it makes you log
Who may demand the log
Regulator
Logging duty
The provider must supply the Authority with counts of complaints received and answered, user reports and flags, and a description of its age-verification and parental-control systems, which cannot be produced without keeping records. The article states no log of individual age checks.
- Kind
- Implicit
- As of
- Provision
- Law 197(I)/2021, Article 32ΣΤ(11)(β)
- Trigger
- age_assurance
What this law does
A video-sharing platform provider under the jurisdiction of Cyprus must take appropriate measures to protect minors from content that may harm their physical, mental, or moral development, including the installation and operation of age-verification systems for users of the platform in relation to such content, per Article 32ΣΤ(8)(στ) of the Radio and Television Organisations Law.
Personal data of minors collected under these measures may not be processed for commercial purposes such as direct marketing, profiling, or behavioural advertising, per Article 32ΣΤ(9). The Cyprus Radio Television Authority may impose an administrative fine of up to 5 percent of the provider's turnover for the preceding financial year, or up to 500,000 euros, for breach of Article 32ΣΤ, per Article 32Ζ(2).
Law 197(I)/2021, which inserted the article, was published in the Official Gazette on . Under article 7 of the Interpretation Law, a Law that provides no other day comes into force on the date of its publication in the Official Gazette.
When LexLint raises it
When your app profile says your app publishes adult content.
Back to the example · Lint your app
Page updated .