Skip to main content

The 3rd and main DPDP commencement date is computed as 13 May 2027, which is interpretation until officially confirmed.

dpdprules.org
Data breached?
☰

Sources last verified on 23 September 2026. Methodology

Concept

Child

Anyone under 18. From 13 May 2027, when section 9 and Rule 10 commence on a date computed from the notification (interpretation until officially confirmed), processing a child's data requires verifiable parental consent, and tracking, behavioural monitoring and targeted advertising directed at children are prohibited. Rule 12 and the Fourth Schedule lift both duties for listed classes and purposes, subject to their conditions, and other exemptions also apply.

Official requirement · verbatim

“child” means an individual who has not completed the age of eighteen years

Read section 2 of the Act, where this term is defined →Rule 10 of the DPDP Rules 2025 →Rule 12 of the DPDP Rules 2025 →

Related tool

Children's Data Checker

See whether child data obligations or exemptions are triggered and what they require.

Open

Children's data under the DPDP Act: consent, bans and exemptions →What is verifiable consent under DPDP? →DPDP for schools and edtech: what the Fourth Schedule exemption really covers →

Sources cited on this page

  1. [1]
    The Digital Personal Data Protection Act, 2023 (Gazette print hosted by MeitY) (Act No. 22 of 2023), s. 2(f), p. 2. Published 11 August 2023. Official source ↗ · Official requirement · Verified 17 August 2026In force since 13 November 2025