Legal sources with official primary sources

Printed ·

SMLM Previewerrors, bugs and incomplete coverage may occurThe model is production-ready during Q4-26

Skip to main content
Skip to the answer
NovaCopilotA service from ExploreWorldAI

Source status and reading dates are reported separately. A reading date is not source verification.

Back to the act

EU regulatory register · GDPR

Article 8Conditions applicable to child's consent in relation to information society services

CELEX 32016R0679 · Read on 2026-08-18 · Chapter II

Share this page

Short answer

1. Where point (a) of Article 6(1) applies, in relation to the offer of information society services directly to a child, the processing of the personal data of a child shall be lawful where the child is at least 16 years old.

Verbatim from the article. Source: NovaCopilot · https://legal.exploreworldai.com/eu/rattsakter/gdpr-2016-679/artikel-8 · Short answer as data · Official text

Official text

Read from the EU Publications Office for this CELEX number. The wording stands as published; nothing here is rewritten or summarised.

1. Where point (a) of Article 6(1) applies, in relation to the offer of information society services directly to a child, the processing of the personal data of a child shall be lawful where the child is at least 16 years old. Where the child is below the age of 16 years, such processing shall be lawful only if and to the extent that consent is given or authorised by the holder of parental responsibility over the child.

Member States may provide by law for a lower age for those purposes provided that such lower age is not below 13 years.

2. The controller shall make reasonable efforts to verify in such cases that consent is given or authorised by the holder of parental responsibility over the child, taking into consideration available technology.

3. Paragraph 1 shall not affect the general contract law of Member States such as the rules on the validity, formation or effect of a contract in relation to a child.

Open the article on EUR-Lex

Follow-up questions

Other articles in this chapter

Knowledge card

Applies
controller: Obtain consent from the holder of parental responsibility when offering information society services directly to a child below 16, or the lower national age of at least 13, and make reasonable efforts to verify it.
Risk if ignored
high
What to do
Obtain consent from the holder of parental responsibility when offering information society services directly to a child below 16, or the lower national age of at least 13, and make reasonable efforts to verify it.
Deadline
No fixed deadline in the register

card:eu:article:gdpr--art-8 · sha256 85723d6a7c57 · Source: NovaCopilot

Risk, sanction and outcome

  • Art. 8 · controller

    Risk: high · Sanction: administrative_fine, högst EUR 10 000 000 · Authority: Competent supervisory authority

    Decisions applying the provision: none in the register

    Full chain (JSON)

Outcomes are counted from stored judgments that cite the provision verbatim. Source: NovaCopilot

Judgments of the Court of Justice

1 decisions

  • C-21/23Court of Justice of the European Union

    ND v DR

    Reference for a preliminary ruling – Protection of personal data – Regulation (EU) 2016/679 – Chapter VIII – Remedies – Medicinal products marketed by a pharmacist on an online platform – Action brought before the national civil courts by a competitor of that pharmacist on the basis of the prohibition of unfair commercial practices for infringement by the pharmacist of the obligations laid down by that regulation – Standing to bring proceedings – Article 4(15) and Article 9(1) and (2) – Directive 95/46/EC – Article 8(1) and (2) – Concept of ‘data concerning health’ – Conditions for the processing of those data.

    Ask NovaCopilot

Judgments applying this article

3 judgments in the register cite the article in their text. EU 3

Source: NovaCopilot

Guidance and secondary law

Authority guidance and the delegated or implementing acts that fill the article, with the primary source at the issuing body. Read 2026-08-31.

The text is quoted from the official source and is not legal advice. A national court reads the language version that binds in its jurisdiction.

Verifiable trust signals

  • Source-linked answers and explicit evidence gaps
  • Obligations, controls, risks and consequences
  • Stable objects and verifiable checksums
  • Rule-based objects, optional source-linked reasoning
  • Model card, source status and audit

Model cardAudit