KVKK and Targeting Risks in Digital Advertising Directed at Children

Updated: 3 September 2026 · Category: Advertising, Targeting and CRM Compliance

KVKK and Targeting Risks in Digital Advertising Directed at Children

From 1 August 2026, Turkey banned advertising targeted at children through profiling based on personal data. Campaigns reaching children should be reviewed jointly for age signals, segment sources and creative/offer design.

Contents

Short answer
Why does it matter?
What should companies do?
How should it be measured?
Sources
Frequently asked questions

Short Answer

Why Does It Matter?

The 1 August 2026 regulation does not ban all digital advertising directed at children. The core prohibited practice is targeting children using profiling based on personal data. Campaign teams must distinguish “we advertise children’s products” from “we build profiles from a child’s personal data and show personalised ads”: these are different operations.

Risk is not limited to manually selected age segments. Platforms can also widen audiences through automatic audience expansion, lookalikes or optimisation systems. Checks on child profiling must therefore examine the actual campaign configuration as well as the brief.

What should companies do? Seven steps to control child-targeting risk

Take inventory of products and campaigns that reach children.
Identify the source and accuracy of the age signal.
Flag profile segments based on personal data separately.
Block profiling-based targeting directed at children.
Test lookalike and automatic audience expansion features separately.
Review influencer and creative language for children’s ability to recognise commercial content.
Retain screenshots/configuration evidence of the targeting settings used in live campaigns.

Proposed measurement model for B10

Control	KPI	Threshold
Audience	Child-relevant campaign count	Inventory
Profiling	Prohibited profiling hit	0
Age signal	Age-source traceability	100%
Auto expansion	Expansion review coverage	100% of at-risk campaigns
Creative	Child-sensitivity review	100%
Evidence	Targeting configuration archive	100%

The critical KPI is keeping the prohibited profiling signal at zero, rather than campaign reach. This control must not be offset by an overall compliance score; it should trigger a direct warning.

Expert Assessment

For compliance in targeting children, marketing cannot rely on an age filter alone. Technical checks must establish whether age estimation, behavioural signals and platform optimisation create child profiles. Expanded audience features in particular should be retested.

Where Does Age Signal Come From?

The safest control model for a campaign involving children starts by classifying age-signal sources. A user-declared date of birth, a parent account, a platform estimate and a behavioural model do not have equal reliability. Brands should distinguish data they control from estimated signals generated by the platform.

Where age is estimated from behavioural signals, separately assess whether the mechanism amounts to profiling based on personal data. The absence of a direct “child” target in a marketing brief does not itself establish that algorithmic delivery avoids reaching children through profiling.

Why should platform optimization be studied separately?

Even if adults are selected at campaign launch, the platform may broaden delivery through performance optimisation, audience expansion or similar automatic features. Check the active campaign’s actual delivery data and change history as well as the initial setup screen.

Assess creative assets and targeting together

A product may appeal to children while its ads target adult parents. Conversely, creative assets or influencer choices for an apparently adult-oriented product may directly attract children. Assess product category, creative language, media audience and actual delivery data together. A single “children’s product” label does not explain the campaign’s actual risk.

Negative control tests can be used

Negative control tests can examine child-targeting risk through actual ad delivery behaviour as well as configuration. Test accounts or permitted analytical methods can periodically check whether an adult-targeted campaign unexpectedly expands into user segments resembling child profiles.

The aim is not to explain the platform’s algorithm completely, but to identify unexpected differences between the brand’s selected audience and actual platform delivery. An unusual distribution can prompt renewed review of automatic expansion, lookalike or optimisation settings.

Assign responsibility for agency and platform settings checks

If an external agency manages the campaign, the prohibition on child targeting should not rest solely on a general contractual “compliance with legislation” clause. Operational procedures can specify which audience features are prohibited, when automatic expansion must be disabled and who archives targeting screenshots.

This gives brand, agency and media-buying teams the same definition of controls and predefined technical checkpoints, rather than a post-campaign explanation that “the platform did it automatically”.

Digital Risk and Compliance Analysis

For campaigns involving children and families, B10 can report campaign-level checks of audience sources, profiling, automatic expansion and creative sensitivity.