I want to go back to a point you raised about children and their privacy. In the United States, the FTC handles the privacy of children under the age of 13, and with the GDPR regulations coming out, the age will be 16. I don't know whether in PIPEDA we have defined in law the age of a child who is considered a minor, but we know that many websites in the United States, especially children's websites, are more highly tracked than adult websites.
Should certain children's websites be no-go zones from which no information can be collected or processed? Under the FTC right now, any child under the age of 13 on certain websites needs parental permission, and for anything over that, the permissions can be circumvented by a child. Should there be a no-go zone in certain children's websites to make sure that their information is not tracked or their privacy breached in any way?