312.5 — Verifiable parental consent before collection

Requirement

The operator obtains verifiable parental consent before collecting, using or disclosing personal information from a child, using a method reasonably calculated to ensure the person consenting is the parent — such as a signed form, a payment-card transaction with notice, a call or video conference with trained staff, government ID checked against a database and deleted, knowledge-based questions, facial matching to ID, or text-plus (email plus) where information is only used internally — unless a 312.5(c) exception applies.

What the engine looks for

Every group below must be satisfied — by an affirmative statement, not a plan, a hedge or a denial — for the control to count as covered. A term ending in … matches any word it begins. Supporting terms do not change the verdict — they raise confidence and distinguish a policy that names a mechanism from one that gestures at a category.

Equivalent controls elsewhere

Matched on shared topics. Satisfying this control usually moves these too.