DPDP Children's Data Rules: How Indian Apps, EdTech and Online Businesses Must Build Age Verification and Parental Consent Before May 2027
The DPDP Act treats every user below eighteen as a child, and Rules 10 to 12 of the DPDP Rules, 2025 prescribe how verifiable parental consent, age assurance and the Fourth Schedule exemptions actually work. These obligations commence on 13 May 2027. This analysis separates age declaration, age assurance and parental verification, explains Rule 10's evidentiary routes without over-collection, maps the Fourth Schedule exemptions, and sets out the product-remediation checklist for apps, EdTech, gaming and online platforms.