Where consent is the basis for offering an information society service directly to a child, processing is lawful for a child aged 13 or over; below 13 it is lawful only with consent given or authorised by the holder of parental responsibility, and the controller must make reasonable efforts, with available technology, to verify that authorisation. Preventive or counselling services are excluded. Since 29 April 2026 (Children's Wellbeing and Schools Act 2026) the Secretary of State may by regulations raise the age to any age up to 16, for all or specified services, and Article 8ZA lets regulations impose age verification requirements; no such regulations are recorded in the held text.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.