Recital 62

In order to ensure that existing accounts are brought into compliance with the minimum age obligations, providers of very large online platforms should before the expiry of the six month time period, submit to the competent authority a detailed implementation plan that corroborates the required high degree of confidence. To this end, the plan should set out a schematic description of the complete process pipeline used to determine the age of existing users, together with a clear account of each technical tool or measure and the underlying decision rules. Where relevant, it should be supported by robust evidence of performance under real-life circumstances derived from a statistically representative sample of the full user base – the representativeness of the sample with respect to the relevant age signals should be demonstrated – and should present accuracy, precision and recall for underage recipients as well as a full confusion matrix with granular age buckets, together with a description of how the sample and the age labels were obtained. Where the year of account creation is relied upon as a derogation, the plan should additionally provide empirical evidence and the statistical confidence that this single signal is sufficient to infer that the user has reached the applicable minimum age. The plan should also outline how the provider will monitor that the expected performance has been achieved, for example through a post‑implementation audit. Finally, the plan should demonstrate that the proposed measures respect the general age‑assurance principles of this Regulation, including accuracy, reliability, security, robustness, non‑intrusiveness, privacy and non‑discrimination.