- Created: 20 January 2016
By Stephen Gardner. Social media companies may have to wait for two years for clarification of the age at which consent for data processing is valid in the EU without parental authorisation.
The EU's new general data protection regulation states that a child below the age of 16 can't consent to the processing of his or her data in the context of “information society services,” and that companies that offer such services must make “reasonable efforts to verify” that a child has the approval of a parent or guardian.
However, the regulation permits EU member states to opt-out of the requirement, as long as they provide for a minimum consent age of 13, in line with rules under the Children's Online Privacy Protection Act in the U.S.
Read the article in full at Bloomberg BNA.