Section 9: Processing of Personal Data of Children
Chapter: Obligations of Data Fiduciary
Maximum Penalty: Up to ₹200 Crore
Overview
Special protections for children under 18: verifiable parental consent, no tracking. This section falls under the "Obligations of Data Fiduciary" chapter of the Digital Personal Data Protection Act 2023, which was enacted to establish a comprehensive framework for data protection in India.
Key Points of Section 9
- Processing children's data requires verifiable parental consent
- Cannot track, profile, or target advertisements at children
- Significant Data Fiduciary processing children's data may face additional obligations
Who This Applies To
EdTech, gaming, social media, and any platform accessible to users under 18
Compliance Action Steps
- Implement age verification mechanisms
- Build parental consent collection workflows
- Disable behavioral tracking and targeted ads for minors
How Complynz Helps
Complynz automates compliance with Section 9 through AI-powered assessments, policy templates, and continuous monitoring. Our platform maps each DPDP provision to actionable controls so your team can achieve and maintain compliance efficiently.
Take Free DPDP Assessment | DPDP Compliance Checklist | View Pricing