Explore Business Standard
The government has released the long-awaited draft of Digital Personal Data Protection Rules which proposes to make parent's verifiable consent and identification mandatory for creation of child's user account on online or social media platforms, and also moots possible data localisation requirements for specified personal data. Notably, the draft rules - which are key to operationalisation of the data protection Act - seek to make parental nod essential for processing of personal data of children. Further, parents' identity and age will also have to be validated and verified through voluntarily provided identity proof "issued by an entity entrusted by law or the government", say the draft rules. A major - and a surprise - takeaway from the draft rules, according to industry experts, is the aspect of localisation and additional oversight on cross-border data sharing in specified cases. On processing of personal data of child, the draft rules state: "A Data Fiduciary shall adopt ...