Why is it always that regulation is the problem, not the company being irresponsible with data.
Can you be irresponsible with childrens' data if you don't know whether your users are children?
https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-re...