The Union government has released the long-awaited draft of Digital Personal Data Protection Rules which specify that parent’s verifiable consent will have to be obtained by social media or online platforms before children can create any account. Further, parents’ identity and age will also have to be validated and verified through voluntarily provided identity proof “issued by an entity entrusted by law or the Government”, as per the draft rules.
“A Data Fiduciary shall adopt appropriate technical and organisational measures to ensure that verifiable consent of the parent is obtained before the processing of any personal data of a child,” the draft rule said. E-commerce, social media and gaming platforms will fall under the category of data fiduciaries.
The draft rules, which have been published for public consultations, will be taken into consideration for making the final rule after February 18. The draft is available on MyGov website for public comments. According to the draft rules, data fiduciaries will have to keep the data only for the time being for which consent has been provided and delete it thereafter. The draft rules have been issued after 14 months of Parliament approving the Digital Data Protection Bill 2023.
“Draft of rules proposed to be made by the central government in exercise of the powers conferred by sub-sections (1) and (2) of section 40 of the Digital Personal Data Protection Act, 2023 (22 of 2023), on or after the date of coming into force of the Act, are hereby published for the information of all persons likely to be affected thereby,” the draft notification said.
The draft rules have mentioned the process of suspending or cancelling registration of consent manager in case of repeated violation, but there is no mention of penalties that were approved under the DPDP Act, 2023. The Act has the provision to impose a penalty of up to Rs 250 crore on data fiduciaries.
(Except for the headline, this story has not been edited by DNA staff and is published from PTI)
Link to article –
Parent’s consent must to create social media accounts of children: Draft data rules
