GDPR Art. 8 EN

Conditions applicable to child's consent in relation to information society services

Child Consent Minors Consent

In force — consolidated2016-05-04 · CELEX 02016R0679-20160504 · ELI ↗

Version history 2

2016-05-04in force CELEX 02016R0679-20160504
2016-04-27 CELEX 32016R0679

1.
Where point (a) of Article 6(1) applies, in relation to the offer of information society services directly to a child, the processing of the personal data of a child shall be lawful where the child is at least 16 years old. Where the child is below the age of 16 years, such processing shall be lawful only if and to the extent that consent is given or authorised by the holder of parental responsibility over the child.¶

Child Consent Personal Data Consent 324
1. Member States may provide by law for a lower age for those purposes provided that such lower age is not below 13 years. ¶
2.

The controller shall make reasonable efforts to verify in such cases that consent is given or authorised by the holder of parental responsibility over the child, taking into consideration available technology.¶

Controllers Consent 134
3.

Paragraph 1 shall not affect the general contract law of Member States such as the rules on the validity, formation or effect of a contract in relation to a child.¶

68

Enforcement

Cited in 9 fines totalling €20.2M

Top authority: 🇪🇺Icelandic data protection authority ('Persónuvernd') (3) · median fine €51,000 · see all enforcement for Art. 8 →

Connections by provision

8(1) 304 Case Law 16 Guidance 3 Literature 1 News .md

Case Law 304

Judgment of the Court (Grand Chamber) of 21 December 2016.#Tele2 Sverige AB v Post- och telestyrelsen and Secretary of State for the Home Department v Tom Watson and Others.#Requests for a preliminary ruling from the Kammarrätten i Stockholm and the Court of Appeal (England & Wales) (Civil Division).#Reference for a preliminary ruling — Electronic communications — Processing of personal data — Confidentiality of electronic communications — Protection — Directive 2002/58/EC — Articles 5, 6 and 9 Judgment of the General Court (Ninth Chamber) of 3 May 2018.#Republic of Malta v European Commission.#Access to documents — Regulation (EC) No 1049/2001 — Documents held by the Commission — Documents originating from a Member State — Documents exchanged pursuant to the control system for ensuring compliance with the rules of the common fisheries policy — Article 113 of Regulation (EC) No 1224/2009 — Public access following a request made by a non-governmental organisation — Action for annulment Judgment of the Court (Sixth Chamber) of 7 March 2024.#Endemol Shine Finland Oy.#Request for a preliminary ruling from the Itä-Suomen hovioikeus.#Reference for a preliminary ruling – Protection of personal data – Regulation (EU) 2016/679 – Articles 2, 4, 6, 10 and 86 – Data held by a court relating to the criminal convictions of a natural person – Oral disclosure of such data to a commercial company on account of a competition organised by that company – Concept of ‘processing of personal data’ Judgment of the General Court (Fifth Chamber, Extended Composition) of 25 September 2018.#Maria Psara and Others v European Parliament.#Access to documents — Regulation (EC) No 1049/2001 — European Parliament — Expenditure by Members of the Parliament of their allowances — Refusal to grant access — Non-existent documents — Personal data — Regulation (EC) No 45/2001 — Need to transfer the data — Specific and individual examination — Partial access — Excessive administrative burden — Obligation to Judgment of the Court (Grand Chamber) of 2 October 2018.#Proceedings brought by Ministerio Fiscal.#Request for a preliminary ruling from the Audiencia Provincial de Tarragona.#Reference for a preliminary ruling — Electronic communications — Processing of personal data — Directive 2002/58/EC — Articles 1 and 3 — Scope — Confidentiality of electronic communications — Protection — Article 5 and Article 15(1) — Charter of Fundamental Rights of the European Union — Articles 7 and 8 — Data processed i Judgment of the Court (Fourth Chamber) of 7 March 2024.#IAB Europe v Gegevensbeschermingsautoriteit.#Request for a preliminary ruling from the Hof van beroep te Brussel.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Regulation (EU) 2016/679 – Standard-setting sectoral organisation proposing to its members rules on the processing of users’ consent – Article 4(1) – Concept of ‘personal data’ – String of letters and characters ca Judgment of the Court (Third Chamber) of 16 January 2019.#Deutsche Post AG v Hauptzollamt Köln.#Request for a preliminary ruling from the Finanzgericht Düsseldorf.#Reference for a preliminary ruling — Customs union — The Union Customs Code — Article 39 — Status of authorised economic operator — Implementing Regulation (EU) 2015/2447 — The second subparagraph of Article 24(1) — Applicant not a natural person — Questionnaire — Collection of personal data — Directive 95/46/EC — Articles 6 and 7 — R Judgment of the Court (Fifth Chamber) of 14 March 2024.#Budapest Főváros IV. Kerület Újpest Önkormányzat Polgármesteri Hivatala v Nemzeti Adatvédelmi és Információszabadság Hatóság.#Request for a preliminary ruling from the Fővárosi Törvényszék.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Regulation (EU) 2016/679 – Article 58(2)(d) and (g) – Powers of the supervisory authority of a Member State – Paragraph 17(1) – Right to e +296 more

Guidance 16

Opinion 39/2021 on whether Article 58(2)(g) GDPR could serve as a legal basis for a supervisory authority to order ex officio the erasure of personal data, in a situation where such request was not submitted by the data subject Opinion 22/2024 on certain obligations following from the reliance on processor(s) and sub-processor(s) Opinion 07/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by the European Patent Organisation Opinion 3/2025 on the draft decision of the French Supervisory Authority (FR SA) regarding the “Lexing GDPR certification criteria” Guidelines 3/2018 on the territorial scope of the GDPR (Article 3) Position paper on Interplay between data protection and competition law Guidelines 05/2022 on the use of facial recognition technology in the area of law enforcement Guidelines 05/2020 on consent under Regulation 2016/679 +8 more

Literature 3

Privacy vs. business convenience: the Mousse judgment and the future of data protection in the EU Tracking Walls, Take-It-Or-Leave-It Choices, the GDPR, and the ePrivacy Regulation If it ain’t broke, don’t fix it? Ten improvements for the upcoming tenth anniversary of the General Data Protection Regulation

News 1

BVwG - W254 2253353-1

8(2) 112 Case Law 19 Guidance 2 Literature 1 News .md

Case Law 112

GC and Others v CNIL Rb. Noord-Holland - AWB-20 2618 MINISTER VOOR IMMIGRATIE V. M, 17.7.2014 (“Minister v. M”) Digital Rights Ireland Ltd v Minister for Communications BVwG - W137 2327171-1 Order of the Vice-President of the Court of 21 April 2023.#European Commission v Republic of Poland.#Interim relief – Article 163 of the Rules of Procedure of the Court of Justice – Application to cancel or vary an order for interim measures – Second subparagraph of Article 19(1) TEU – Article 47 of the Charter of Fundamental Rights of the European Union – Effective judicial protection – Independence of judges – Non-execution – Change in circumstances – Periodic penalty payment.#Case C-204/21 R- Judgment of the Court (Tenth Chamber) of 13 June 2024.#Criminal proceedings against HYA and Others.#Request for a preliminary ruling from the Sofiyski gradski sad.#Reference for a preliminary ruling – Telecommunications sector – Processing of personal data and the protection of privacy – Directive 2002/58/EC – Article 15(1) – Restriction of the confidentiality of electronic communications – Judicial decision authorising listening, tapping and storage in respect of telephone conversations of pers CJEU - Case C-291/12 - Schwarz +104 more

Guidance 19

Guidelines 05/2020 on consent under Regulation 2016/679 Opinion 07/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by the European Patent Organisation Statement on restrictions on data subject rights in connection to the state of emergency in Member States Recommendations 02/2020 on the European Essential Guarantees for surveillance measures EDPB-EDPS Joint Opinion 01/2023 on the Proposal for a Regulation of the European Parliament and of the Council laying down additional procedural rules relating to the enforcement of Regulation (EU) 2016/679 Joint Guidelines on the Interplay between the Digital Markets Act and the General Data Protection Regulation Statement 02/2021 on new draft provisions of the second additional protocol to the Council of Europe Convention on Cybercrime (Budapest Convention) Recommendations 01/2021 on the adequacy referential under the Law Enforcement Directive +11 more

Literature 2

The Court of Justice on the Excessiveness of Access Requests under the GDPR General Data Protection Regulation (GDPR) – Revolution Coming to European Data Protection Laws in 2018. What’s New for Ordinary Citizens?

News 1

Netflix, Spotify & YouTube: Eight Strategic Complaints filed on “Right to Access”

8(3) 57 Case Law 11 Guidance .md

Case Law 57

Judgment of the Court (Fourth Chamber) of 16 July 2015.#Coty Germany GmbH v Stadtsparkasse Magdeburg.#Request for a preliminary ruling from the Bundesgerichtshof.#Reference for a preliminary ruling — Intellectual and industrial property — Directive 2004/48/EC — Article 8(3)(e) — Sale of counterfeit goods — Right to information in the context of proceedings for infringement of an intellectual property right — Legislation of a Member State which allows banking institutions to refuse a request for CJEU - C-362/14 - Schrems I Judgment of the Court (First Chamber) of 7 December 2023.#UF and AB v Land Hessen.#Requests for a preliminary ruling from the Verwaltungsgericht Wiesbaden.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Regulation (EU) 2016/679 – Article 5(1)(a) – Principle of ‘lawfulness’ – Point (f) of the first subparagraph of Article 6(1) – Necessity of processing for the purposes of the legitimate interests pursued by the controller or by DIGITAL RIGHTS IRELAND LTD V. IRELAND, Data Protection Commissioner v. Schrems and Facebook Judgment of the Court (Grand Chamber), 8 April 2014.#European Commission v Hungary.#Failure of a Member State to fulfil obligations — Directive 95/46/EC — Protection of individuals with regard to the processing of personal data and the free movement of such data — Article 28(1) — National supervisory authorities — Independence — National legislation prematurely bringing to an end the term served by the supervisory authority — Creation of a new supervisory authority and appointment of another per CJEU - C-288/12 - European Commission v Hungary Judgment of the Court (Full Court) of 30 April 2024.#La Quadrature du Net and Others v Premier ministre and Ministère de la Culture.#Request for a preliminary ruling from the Conseil d'État (France).#Reference for a preliminary ruling – Processing of personal data and the protection of privacy in the electronic communications sector – Directive 2002/58/EC – Confidentiality of electronic communications – Protection – Article 5 and Article 15(1) – Charter of Fundamental Rights of the European Unio +49 more

Guidance 11

Guidelines 02/2022 on the application of Article 60 GDPR Statement 3/2024 on data protection authorities’ role in the Artificial Intelligence Act framework Opinion 07/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by the European Patent Organisation Contribution of the EDPB to the European Commission’s evaluation of the Data Protection Law Enforcement Directive (LED) under Article 62 Statement on the ePrivacy Regulation and the future role of Supervisory Authorities and the EDPB Statement on the Digital Services Package and Data Strategy EDPB-EDPS Joint Opinion 2/2022 on the Proposal of the European Parliament and of the Council on harmonised rules on fair access to and use of data (Data Act) EDPB-EDPS Joint Opinion 03/2022 on the Proposal for a Regulation on the European Health Data Space +3 more

Related across sources

Literature If it ain’t broke, don’t fix it? Ten improvements for the upcoming tenth anniversary of the General Data Protection Regulation News States attempted to censor the online activities of children. Courts and the Electronic Frontier Foundation (EFF) largely managed to prevent this: a look back at 2025. News Short: Guidance Opinion 16/2025 regarding the draft decision of the German North Rhine Westphalia Supervisory Authority regarding Trusted Site Data Privacy (TÜV IT) certification criteria Guidance Opinion 15/2025 on the draft decision of the Austrian Supervisory Authority (AT SA) regarding the certification criteria of BDO Consulting GmbH Guidance Opinion 3/2025 on the draft decision of the French Supervisory Authority (FR SA) regarding the “Lexing GDPR certification criteria”