Requirement
Before collecting a child's personal information, the operator makes reasonable efforts to give the parent direct notice explaining what information is being collected, that consent is required, the purposes, any disclosure to third parties (with the identities or categories of recipients and purposes), and that the information will be deleted if consent is not given within a reasonable time.
What the engine looks for
Every group below must be satisfied — by an affirmative statement, not a plan, a hedge or a denial — for the control to count as covered. A term ending in … matches any word it begins. Supporting terms do not change the verdict — they raise confidence and distinguish a policy that names a mechanism from one that gestures at a category.
Equivalent controls elsewhere
Matched on shared topics. Satisfying this control usually moves these too.
| Framework | Control | Title | Shared topics |
|---|---|---|---|
| GDPR | Art.8 | Conditions for a child's consent to online services | consent children |
| CCPA/CPRA | 1798.120(c)-(d) | Opt-in consent to sell or share minors' information | children consent |
| NDPA 2023 | s.31 | Processing the data of children and persons lacking capacity | consent children |
| GDPR | Art.5(1)(a) | Lawfulness, fairness and transparency | privacy-notice |
| GDPR | Art.6 | Lawful basis for processing | consent |
| GDPR | Art.7 | Conditions for consent | consent |
| GDPR | Art.12 | Transparent communication and handling of rights requests | privacy-notice |
| GDPR | Art.13 | Information when data is collected from the data subject | privacy-notice |