Concept

Child

Anyone under eighteen. Processing a child's data requires verifiable parental consent, and tracking, behavioural monitoring and targeted advertising at children are prohibited, subject to narrow conditional exemptions.

Official requirement · verbatim

“child” means an individual who has not completed the age of eighteen years

Read section 2 of the Act, where this term is defined →Rule 10 of the DPDP Rules 2025 →Rule 12 of the DPDP Rules 2025 →

Related tool

Children's Data Checker

See whether child data obligations or exemptions are triggered and what they require.

Open

DPDP rules for children's personal data →What is verifiable consent under DPDP? →

Sources cited on this page

[1]The Digital Personal Data Protection Act, 2023 (Gazette print hosted by MeitY) (Act No. 22 of 2023), s. 2(f), p. 2. Published 11 August 2023. Official source ↗ · Official requirement · Verified 17 August 2026