Child & Guardian
Special protections for minors.
🎯 Learning Objectives
- ▸ Define a child under the DPDPA
- ▸ Understand verifiable parental consent
- ▸ Understand behavioral tracking bans for children
Age of Consent
Section 9 defines a child as an individual who has not completed eighteen years of age. The Data Fiduciary must obtain verifiable consent from the parent or lawful guardian.
Furthermore, Section 9(3) prohibits tracking, behavioral monitoring, or targeted advertising directed at children. This is one of the strictest provisions in the Act.
📖 Glossary
- Verifiable Consent
- Consent obtained through reliable mechanisms (like DigiLocker or a credit card check) to prove the person is an adult or a parent.
🔑 Key Takeaways
- A child is under 18 years old.
- Verifiable consent from a parent/guardian is mandatory.
- Targeted advertising to children is banned.
📚 Further Reading
- DPDPA Section 9 — Government of India (2023)

Shilpi Kulshrestha
Shilpi is a corporate lawyer with over a decade of experience in data protection, company law, and regulatory compliance. She has advised 50+ startups and enterprises on DPDPA readiness, privacy gover...