Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Text with EEA relevance)

Print Options
PrintThe Whole
Regulation
PrintThe Whole
Chapter
PrintThis
Article
only
Status:
Point in time view as at 31/01/2020. This version of this provision has been superseded.

Status
You are viewing this legislation item as it stood at a particular point in time. A later version of this or provision, including subsequent changes and effects, supersedes this version.
Note the term provision is used to describe a definable element in a piece of legislation that has legislative effect – such as a Part, Chapter or section.
Changes to legislation:
Regulation (EU) 2016/679 of the European Parliament and of the Council, Article 8 is up to date with all changes known to be in force on or before 18 March 2025. There are changes that may be brought into force at a future date. Changes that have been made appear in the content and are referenced with annotations.

Changes to Legislation
Changes and effects yet to be applied by the editorial team are only applicable when viewing the latest version or prospective version of legislation. They are therefore not accessible when viewing legislation as at a specific point in time. To view the ‘Changes to Legislation’ information for this provision return to the latest version view using the options provided in the ‘What Version’ box above.
Article 8U.K.Conditions applicable to child's consent in relation to information society services
1.Where point (a) of Article 6(1) applies, in relation to the offer of information society services directly to a child, the processing of the personal data of a child shall be lawful where the child is at least 16 years old. Where the child is below the age of 16 years, such processing shall be lawful only if and to the extent that consent is given or authorised by the holder of parental responsibility over the child.
Member States may provide by law for a lower age for those purposes provided that such lower age is not below 13 years.
2.The controller shall make reasonable efforts to verify in such cases that consent is given or authorised by the holder of parental responsibility over the child, taking into consideration available technology.
3.Paragraph 1 shall not affect the general contract law of Member States such as the rules on the validity, formation or effect of a contract in relation to a child.
Back to top