Companies directly marketing to customers must not use the Internet to gather data about children. That’s according to a new code of practice published by the Direct Marketing Association (DMA), which says companies must seek parental consent for children under 12 years old, The Register reports. The code must be adhered to by members of the DMA.

“Even if your site is not primarily aimed at young people, if there is a possibility that it would be attractive to them…you have a responsibility,” a DMA spokeswoman said.

The revision brings the code into compliance with the new CAP Code, which sets the rules governing advertising in the UK, the report states, and includes a whole new annex containing the rules on marketing to children. The new code has also been updated to take account of changes in legislation including the new Consumer Protection Regulations 2008 and the Gambling Act 2005, and also features a new section on key environmental responsibilities.