DPDP Act 2023 · Obligations

Section 9: Children's data

What Section 9 says, in plain English

Verifiable parental consent for anyone under 18. No behavioural monitoring or targeted advertising directed at children, with no 'with consent' carve-out for the prohibition.

What it means for you

Rule 11 of DPDP Rules 2025 prescribes acceptable verification methods (Digilocker, video KYC, other RBI-KYC-grade methods). Age gating via a checkbox is not enough.

Other sections in Obligations

Section 4: Grounds for processing Section 5: Notice Section 6: Consent Section 7: Certain legitimate uses Section 8: General obligations of Data Fiduciary Section 10: Additional obligations for Significant Data Fiduciaries

Also useful

All 44 sections DPDP vs GDPR Scan your site Ask a DPO (free)

← Section 8: General obligations of Data Fiduciary All sections Section 10: Additional obligations for Significan... →