Businesses & Professionals
Children's Data Under DPDP
What DPDP requires of any business whose product touches a child's data — verifiable parental consent, no behavioural tracking or targeting of minors, and the practical steps to get both right. The fiduciary-facing counterpart to Children & Parents, which covers the consumer/parent side.
Is your app used by minors? What the DPDP Act demandsUnder DPDP anyone under 18 is a child, and the child-data rules trigger on use, not intent. How to tell if they apply to you, and what switches on when they do.The no tracking, no targeting rule: how DPDP protects children onlineDPDP bans tracking, behavioural monitoring and targeted ads directed at under-18s — and parental consent can't override it. What the ban covers, and its narrow exemptions.What counts as verifiable parental consent under DPDP? A practical guide for Indian businessesA 'click here if you're a parent' checkbox doesn't meet DPDP's bar. The two accepted ways to verify parental consent under Rule 10, the exemptions, and how to build it in.Parental consent for schools and apps: what to ask before collecting a child's dataWhat to ask before collecting a child's data — for schools and for apps. Minimise, verify the parent, bind to purpose; where schools get relief and apps don't.How to implement age-verification gates for Indian apps under DPDPDPDP doesn't prescribe an age-check method — Rule 10 verifies the parent, not the child. How to build proportionate age assurance that routes minors to parental consent.