Abstract
This article concerns the processing of personal data of children in the context of information society services on the example of social networking sites. The authors discuss the existing regulations and compare them with the recently adopted Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation). First and foremost considered is the issue of giving consent by the child itself, as well as the question of the defects in consent.