Set by the law · GDPR Art. 8(1)
Conditions applicable to a child's consent
In plain English
For online services offered directly to children and based on consent, a child can consent alone from 16. Below that, a parent must give or authorise consent. EU countries may lower the age, but not below 13.
The official text
in relation to the offer of information society services directly to a child, the processing of the personal data of a child shall be lawful where the child is at least 16 years old. Where the child is below the age of 16 years, such processing shall be lawful only if and to the extent that consent is given or authorised by the holder of parental responsibility over the child. Member States may provide by law for a lower age for those purposes provided that such lower age is not below 13 years.
16 decisions on Fino cite Article 8 GDPR. See them →
Related
The official text is quoted word for word from the English version of the source named under it; only the version published in the Official Journal of the EU is legally binding. The plain-English line is Fino’s own summary, not legal advice.