The GDPR says that children’s personal data need specific protection, as children may be less aware of their rights, and of what can happen if a company uses their personal data, especially for advertising or proposing content. Information about data processing should be clear and easy for a child to understand. Everyone has the right to be forgotten, under certain conditions. That means a user can ask a company to remove his/her personal data, especially when if (s)he agreed to this as a child.
For most online services, such as a social networking site or gaming platform, children have to be at least 16 (or no younger than 13 depending on national rules) to consent to share their personal data. For children younger than the applicable national rules, a parent or guardian has to consent to the data processing before the service is provided to the child.
(Source: EC Compendium of BIK-related legislation).

The GDPR says that children’s personal data need specific protection, as children may be less aware of their rights, and of what can happen if a company uses their personal data, especially for advertising or proposing content. Information about data processing should be clear and easy for a child to understand. Everyone has the right to be forgotten, under certain conditions. That means a user can ask a company to remove his/her personal data, especially when if (s)he agreed to this as a child.
For most online services, such as a social networking site or gaming platform, children have to be at least 16 (or no younger than 13 depending on national rules) to consent to share their personal data. For children younger than the applicable national rules, a parent or guardian has to consent to the data processing before the service is provided to the child.
(Source: EC Compendium of BIK-related legislation).
- Related content
- data privacy data protection data security protection