Lesson 8.2: Verifiable parental consent: Rules 10 and 11

Module 8 · Lesson 8.2 of 6 · About 30 minutes · Rules 10 and 11

How do you check that a parent is really a parent? The Rules give a method. This DPDPA 2023 course page explains rules 10 and 11 in plain language.

rules 10 and 11 - DPDPA 2023 course lesson banner
Advertisement

What you will learn about rules 10 and 11

  • Describe verifiable consent
  • Choose a verification method
  • Handle guardians of persons with disability

Rule 10 and 11 (rules 10 and 11)

The fiduciary must adopt measures to ensure that the person giving consent is an identifiable adult and the parent, for example by relying on reliable details of identity and age already held, or on a virtual token issued by an authorised entity such as a digital locker service. For a person with disability who has a lawful guardian, the fiduciary must verify the guardian under the relevant law, for example by a court order or designated authority.

Parental consent flow: click each

Select a numbered box to read more.

11 Detectchild22 Askparent33 Verifyadult44 Getconsent55 Log
Tap or click a step to see exactly what to do.
Advertisement

Options (rules 10 and 11)

MethodNote
Existing verified detailsFiduciary already has reliable ID of the parent
Virtual token from authorised entityIssued against verified identity
Court order or authorityFor guardians

Worked example

A kids’ learning app asks for the parent’s phone, verifies through a token service, and records the consent before the child can sign up.

Activity (5 minutes) (rules 10 and 11)

Use the decision tree in How to handle children’s data.

Key takeaway: Do not collect more identity data than the check needs.

Check your understanding of rules 10 and 11

Q1. Verification should show the consenter is:

Q2. A token can come from:

Q3. For disability guardians, verify via:

Educational material for learning purposes, not legal advice. Check the official text of the DPDP Act, 2023, the DPDP Rules, 2025 and MeitY notifications for the latest position.

Official sources for rules 10 and 11: Digital Personal Data Protection Rules, 2025 (MeitY, PDF) and DPDP Rules 2025, English text (PDF). Always check the latest official notifications.