Personal data of children
Obtain verifiable consent of a parent or lawful guardian before processing a child's personal data. Do not undertake tracking, behavioural monitoring or targeted advertising directed at children, or any processing likely to cause detrimental effect on a child's well-being.
Obtain verifiable consent of a parent or lawful guardian before processing a child's personal data. Do not undertake tracking, behavioural monitoring or targeted advertising directed at children, or any processing likely to cause detrimental effect on a child's well-being.
Up to ₹200 crore for breach of additional obligations regarding children.
Evidence a regulator would accept
- Parental consent records
- Age assurance configuration
- Children's data inventory
How this product discharges it
Changing this recalculates the readiness score immediately.
- Current
- Gap
- Residual risk
- Critical
- Owner
- Meera Iyer
- Last reviewed
- 12 Jun 2026
- Next review due
- 05 Nov 2026
Open gaps (1)
Gaps raised against this obligation. Closing one moves this clause forward.
Evidence (1)
Documents indexed against this obligation in the evidence vault.
History
- Clause status updated following remediationyesterday06 Aug 2026, 00:30Deepika Joshi
- Clause status updated following remediation4 days ago03 Aug 2026, 17:30Rohit Verma
- Clause status updated following remediation6 days ago01 Aug 2026, 10:30Naveen Kulkarni
- Clause status updated following remediation8 days ago30 Jul 2026, 06:30Vikram Saxena
- Clause status updated following remediation10 days ago28 Jul 2026, 00:30Imran Sethi
- Clause status updated following remediation13 days ago25 Jul 2026, 16:30System
- Position reviewed and recorded2 months ago12 Jun 2026, 11:55Meera Iyer