Indian Perspective On Protecting Children's Privacy

As access to internet and technology is increasingly pervasive, children emerge as significant stakeholders in the digital economy. Unfortunately, existing and proposed legal frameworks are not designed to protect children's interests and are even less effective in child data protection and privacy.

Data protection compliance is governed by the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI rules). Under the SPDI rules, the threshold for the collection of sensitive personal data or information, including passwords, financial and health information, biometrics, and sexual orientation, is the written or electronic consent of data subjects.