Lesson 8.2: Verifiable parental consent: Rules 10 and 11
How do you check that a parent is really a parent? The Rules give a method. This DPDPA 2023 course page explains rules 10 and 11 in plain language.
What you will learn about rules 10 and 11
- Describe verifiable consent
- Choose a verification method
- Handle guardians of persons with disability
Rule 10 and 11 (rules 10 and 11)
The fiduciary must adopt measures to ensure that the person giving consent is an identifiable adult and the parent, for example by relying on reliable details of identity and age already held, or on a virtual token issued by an authorised entity such as a digital locker service. For a person with disability who has a lawful guardian, the fiduciary must verify the guardian under the relevant law, for example by a court order or designated authority.
Parental consent flow: click each
Select a numbered box to read more.
Options (rules 10 and 11)
| Method | Note |
|---|---|
| Existing verified details | Fiduciary already has reliable ID of the parent |
| Virtual token from authorised entity | Issued against verified identity |
| Court order or authority | For guardians |
Worked example
A kids’ learning app asks for the parent’s phone, verifies through a token service, and records the consent before the child can sign up.
Activity (5 minutes) (rules 10 and 11)
Use the decision tree in How to handle children’s data.
Check your understanding of rules 10 and 11
Q1. Verification should show the consenter is:
Q2. A token can come from:
Q3. For disability guardians, verify via:
Educational material for learning purposes, not legal advice. Check the official text of the DPDP Act, 2023, the DPDP Rules, 2025 and MeitY notifications for the latest position.
