January 4, 2025: 

The central government has unveiled a draft under the Digital Personal Data Protection Act, 2023, requiring children under 18 to obtain parental consent for creating social media accounts. Released on January 4, 2025, the draft reflects the government’s intent to bolster privacy and data security for minors in the digital space.

The proposed regulations task data fiduciaries, which include social media platforms, e-commerce sites, and gaming services, with verifying the parental consent of minors through robust technical and organizational measures. These measures aim to ensure the consent process is credible, with the draft explicitly stating the necessity for due diligence in handling children’s personal data.

Additionally, the rules emphasize verifying the identity of parents providing consent. Entities must confirm that the individual claiming parental authority is an adult, using reliable identity and age verification mechanisms or government-issued virtual tokens.

While the draft rules outline the requirements for compliance, they omit details regarding penalties for violations, leaving room for further deliberation. The government has invited public feedback on the draft, setting February 18, 2025, as the deadline for suggestions.

This development marks a significant step toward regulating digital interactions and protecting minors online. It also sets the stage for platforms to adapt their operations to meet the stringent requirements of the Digital Personal Data Protection Act.