Regulation (EU) 2016/679 as retained in UK law (UK GDPR) – Article 8ZA – Child’s consent in relation to information society services: age verification
Articles
Article 8ZA[F1Child’s consent in relation to information society services: age verification
1. The Secretary of State may by regulations make provision about verifying—
- (a)that a data subject who has given consent to the processing of his or her personal data in relation to the offer of information society services is at least the age for the time being specified in Article 8(1);
- (b)in the case of a service specified, or of a description specified, in regulations under Article 8(2A)(b), that a data subject who has given consent to the processing of his or her personal data in relation to the offer of information society services is at least the age for the time being applicable by virtue of those regulations in relation to that service or description of service.
2. The provision that may be made by regulations under paragraph 1 includes—
- (a)provision imposing requirements on persons specified, or of a description specified, in the regulations;
- (b)provision about the steps that must or may be taken by such persons for the purposes of complying with a requirement imposed by the regulations;
- (c)provision about the monitoring of compliance with a requirement imposed by the regulations;
- (d)provision about the enforcement of a requirement imposed by the regulations.
3. Regulations under paragraph 1 may—
- (a)make provision amending, repealing, revoking or applying (with or without modifications) any provision of the data protection legislation (within the meaning given by section 3(9) of the Data Protection Act 2018);
- (b)make provision for exceptions to requirements imposed by the regulations;
- (c)make provision about the time by which, or period within which, a thing must be done;
- (d)make provision by reference to standards, arrangements, specifications or technical requirements as published from time to time;
- (e)confer functions on a person, including functions involving the exercise of a discretion, and make provision in connection with the procedure for exercising the functions.
4. Regulations under this Article are subject to the affirmative resolution procedure.
5. In paragraph 1, the reference to information society services does not include preventive or counselling services.]
Annotations and footnotes
Textual Amendments
- F1 Art. 8ZA inserted (29.4.2026) by Children’s Wellbeing and Schools Act 2026 (c. 21), ss. 72(3), 78(1)(b)
https://uk-gdpr.digiphile.law/article/article-8ZA.html
Text as at 17 September 2026.
This is an unofficial convenience version of the UK GDPR (Regulation (EU) 2016/679 as retained in UK law). It is presented “as is” without guarantee of accuracy, completeness or reliability. See the source text for the official version. This site was last updated in September 2026.