DPDP Glossary

Verifiable Consent

Consent obtained in accordance with Rule 10 or Rule 11 for processing personal data of a child or of a person with disability who has a lawful guardian.

Rules 2, 10 and 11

What it means

Verifiable consent is the Rules-layer standard for obtaining consent in child (Rule 10) and certain person-with-disability guardian (Rule 11) contexts. It builds on Section 9 and the Act’s consent qualities, adding due-diligence expectations so the Fiduciary can verify the adult or guardian role the Rules describe.

Worked example

Asking a child to type a parent’s email without any adult-identity diligence is unlikely to satisfy Rule 10’s verifiable-consent idea. A flow that confirms an adult parent/guardian and keeps evidence appropriate to the Rules is closer to the design — while Rule 11 still needs guardianship appointment checks when that Rule applies.

In practice

Implement separate Rule 10 and Rule 11 pathways. Retain evidence proportionate to the diligence required. See Section 9 for the children’s framework and Lawful Guardian for the actors.

DPDP Section 9: Children’s Personal Data →

Source

Rules 2, 10 and 11 · Official text (PDF)

Educational summary based on the Digital Personal Data Protection Act, 2023 and Rules, 2025. Not legal advice.

Further reading

← Back to glossary