{"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2016-05-04","gaps":[],"covered":["GDPR L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-10-26","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/gdpr/articles/8","url":"https://www.headlesslaw.com/gdpr/articles/8","title":"Article 8 — Conditions applicable to child's consent in relation to information society services","family":"l1_generated","work_id":"gdpr","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-02","applies_from":"2018-05-25","application":{"state":"applicable","next":null,"dates":[{"at":"2018-05-25","note":"Article 99(2)"}]},"version_label":"Consolidated version of 4 May 2016","check":{"against":"EUR-Lex","on":"2026-10-26"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02016R0679-20160504","valid_from":"2016-05-04","valid_until":"2018-05-25","revision":1,"content_id":"14dc9114ca9e2365","change_date":null,"nearest_versions":["2016-05-04"],"first_text_date":"2016-04-27","correction_applies":false,"versions":["2016-05-04"],"version_url":"https://www.headlesslaw.com/gdpr/articles/8/versions/2016-05-04","revision_url":"https://www.headlesslaw.com/gdpr/articles/8/versions/2016-05-04/rev/14dc9114ca9e2365","versions_url":"https://www.headlesslaw.com/gdpr/articles/8/versions","relations_url":"https://www.headlesslaw.com/gdpr/articles/8/relations","source_line":null,"attribution":null},"provenance":{"official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02016R0679-20160504","check":{"result":"matched","checked_at":"2026-10-26","against":"EUR-Lex"},"repo_path":"spaces/gdpr/articles/8.md","body_sha256":"5885c644820e447594ba14e773af0f8b8cad2ddd0296036b7a3ae355c98e5d0b"},"units":[{"locator":"gdpr/art/8","kind":"article","status":"in_force","label":null,"heading":"Conditions applicable to child's consent in relation to information society services","text":"","marks":[],"revision":1,"text_hash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","reason":null},{"locator":"gdpr/art/8/para/1","kind":"paragraph","status":"in_force","label":"1.","heading":null,"text":"Where point (a) of Article 6(1) applies, in relation to the offer of information society services directly to a child, the processing of the personal data of a child shall be lawful where the child is at least 16 years old. Where the child is below the age of 16 years, such processing shall be lawful only if and to the extent that consent is given or authorised by the holder of parental responsibility over the child.","marks":[],"revision":1,"text_hash":"d05b48685177f8e606f9fb079e02605baeb690f5ad87b1e619e36b7032fbfb68","reason":null},{"locator":"gdpr/art/8/para/1/cont/1","kind":"continuation","status":"in_force","label":null,"heading":null,"text":"Member States may provide by law for a lower age for those purposes provided that such lower age is not below 13 years.","marks":[],"revision":1,"text_hash":"271ec8ff7ea8c17ebf0bc91800bfe17f087fd33d592ef171fd0773402971ae21","reason":null},{"locator":"gdpr/art/8/para/2","kind":"paragraph","status":"in_force","label":"2.","heading":null,"text":"The controller shall make reasonable efforts to verify in such cases that consent is given or authorised by the holder of parental responsibility over the child, taking into consideration available technology.","marks":[],"revision":1,"text_hash":"4a572b9fde1b8fd97666c3cb5925d2edd2527b4969b67ab65fb7fcf84124e267","reason":null},{"locator":"gdpr/art/8/para/3","kind":"paragraph","status":"in_force","label":"3.","heading":null,"text":"Paragraph 1 shall not affect the general contract law of Member States such as the rules on the validity, formation or effect of a contract in relation to a child.","marks":[],"revision":1,"text_hash":"d035667825e2476188fd3430beb95e114517367e123a59cec4847f0217c33ee3","reason":null}],"markdown":"---\ntitle: \"Article 8 — Conditions applicable to child's consent in relation to information society services\"\ntype: regulation\nlegal_status: in_force\nsource: \"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02016R0679-20160504\"\nsource_retrieved: 2026-09-28\nshortTitle: \"Article 8 — Conditions applicable to child's consent in relation to information society services\"\ninstrument_type: level1_regulation\nauthority: Commission\nbinding: true\nbinding_character: binding\nmica_level2: false\nlegal_basis: \"Regulation (EU) 2016/679\"\ninstrument: gdpr\ncelex: \"32016R0679\"\nregulation: GDPR\nregulation-full: \"Regulation (EU) 2016/679\"\narticle: 8\nstatus: in_force\nobject_id: eu.gdpr.legal_text.article.8\ntext_version: \"Consolidated version of 4 May 2016\"\nsource_url: \"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02016R0679-20160504\"\ncheck_status: matched\nverified: true\nlast_checked: 2026-10-26\n---\n\n*In force · Consolidated version of 4 May 2016 · Checked against EUR-Lex on 26 Oct 2026 · [Official source](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02016R0679-20160504)*\n\n1. <a id=\"p-1\"></a>Where point (a) of [Article 6(1)](6.md) applies, in relation to the offer of information society services directly to a child, the [processing](https://www.headlesslaw.com/definitions/gdpr/processing) of the [personal data](https://www.headlesslaw.com/definitions/gdpr/personal-data) of a child shall be lawful where the child is at least 16 years old. Where the child is below the age of 16 years, such processing shall be lawful only if and to the extent that [consent](https://www.headlesslaw.com/definitions/gdpr/consent-of-the-data-subject) is given or authorised by the holder of parental responsibility over the child.\n\n    Member States may provide by law for a lower age for those purposes provided that such lower age is not below 13 years.\n2. <a id=\"p-2\"></a>The [controller](https://www.headlesslaw.com/definitions/gdpr/controller) shall make reasonable efforts to verify in such cases that consent is given or authorised by the holder of parental responsibility over the child, taking into consideration available technology.\n3. <a id=\"p-3\"></a>Paragraph 1 shall not affect the general contract law of Member States such as the rules on the validity, formation or effect of a contract in relation to a child.\n\n## Related Level 2 and Level 3\n\n### Guidance and Q&A\n\n- [EDPB 05/2020 — Guideline — Consent \\[final\\]](../level-3/guidelines/edpb-05-2020-consent.md)\n\n***\n\n[Chapter II — Principles](../chapters/ii.md) · [← Article 7](7.md) · [Article 9 →](9.md)\n"}