Children's Data Protection
Description
Verifiable parental consent required before processing data of children (under 18 in India per DPDP).
⚠️ Risk Impact
Children's data processing without verifiable consent is direct violation. Behavioral monitoring of children is restricted.
🔍 How EchelonGraph Detects This
EchelonGraph's Tier 1 Cloud Scanner automatically checks for this condition across all connected cloud accounts. Violations are flagged as high-severity findings with remediation guidance.
🔧 Remediation
Age-gating. Verifiable parental consent (government-ID-based). No behavioral monitoring of children.
💀 Real-World Attack Scenario
A social platform processed Indian users 13-17 without verifying parental consent. DPDP enforcement: ₹95 crore + ordered to disable accounts pending verifiable consent.
💰 Cost of Non-Compliance
Children's data violations: ₹50-₹250 crore.
📋 Audit Questions
- 1.Age-gating?
- 2.Verifiable parental consent mechanism?
- 3.Behavioral monitoring of children?
⚡ Common Pitfalls
- ⛔Self-declared age
- ⛔No consent verification
- ⛔Behavioral monitoring of minors
📈 Business Value
Strong children's data controls + DPDP defensibility.
⏱️ Effort Estimate
Age-gating + consent flow
EchelonGraph tracks consent management
🔗 Cross-Framework References
Automate DPDP Act DPDP-10 compliance
EchelonGraph continuously monitors this control across all your cloud accounts.
Start Free →