GDPR and Children – Parental Consent

Thus, your company or organisation can only process a child’s personal data on grounds of consent with the explicit consent of their parent or guardian up to a certain age. Besides, the age threshold for obtaining parental consent varies between 13 and 16 years, depending on the age established in each EU Member State. Check with your National Data Protection Authority.

Children, GDPR and age verification measures

As a consequence, reasonable effort must be made, taking into consideration available technology, to verify that the consent given is truly in line with the law. That means that your company or organisation must implement age-verification measures (for example control questions, actions on the website).

Moreover, the consent from the parent or guardian must be obtained if your organisation works on online social networking sites that provide free games to children or family insurance, for example.

If your organisation targets children, you must ensure that any information and communication addressed to a child is easily accessible and in clear and plain language that a child can easily understand.

Besides, preventive or counselling services offered directly to a child don’t require parental authorisation since they are aimed at protecting the children’s best interests.

 

GDPR Compliance

Wondering if your privacy policy is GDPR Compliant? Therefore, we encourage you to perform a quick and free GDPR compliance scan of your privacy policy. Simply paste in the link to your privacy policy web page here in our Privacy Policy Checker, and see where you stand with GDPR compliance efforts.

GDPR Compliance software for the SME – GDPRWise App

Get access to our GDPR compliance software. GDPR requirements have been simplified and reduced to their essence for you. In a single click, the GDPRWise App can generate your privacy policy and GDPR register, based on the sector specific content we provide in your online GDPRWise dossier. Our software solution holds listings of the processing activities that touch on personal data in a great many industries.