Children online

Last reviewed
Children online

Austria 05.06.2018 As regards child's consent in relation to information society services, Sec 4 (4) ADPA lowers the minimum age to 14 years.
Belgium 08.10.2018 13 years
Czech Republic 13.09.2018 Section 7 sets the age of consent for children in relation to offering of information society services at 15 years of age.
Denmark 06.09.2018 13 years
Finland 13.11.2018 According to the Data Protection Act, the age limit for providing information society services on the basis of consent is 13 years.

Age limits of 13 and 15 years, were considered. Ultimately the decision was based on the comments received during the consultation phase and on the decisions made by other Nordic countries.
France 11.02.2019 15 years.
Article 7-1. If under 15, joint consent from the child and the holder of parental authority is required.
Germany 23.05.2018 No
Hungary 01/04/2019 No specific provisions.
Ireland  7.06.2018  Under section 31 of the Act, the age at which a child may consent on their own behalf to processing in relation to information society services is 16 years of age. Within three years of the Act coming in to operation, the Minister for Justice and Equality must commence a review of the age of digital consent.
Italy 25.10.2018 14 years
Netherlands 17.09.2018 16 years
Poland 07.09.2018 n/a
Slovakia 13.09.2018 

16 years

Spain 05.03.2019 14 years old (Article 7 of the SDPA)
Sweden 06.09.2018 13 years
UK: 23.05.2018 Article 8(1) of the GDPR states that where the offer of “information society services” is made directly to a child, and the legal basis for the processing of that child’s data is consent per Article 6(1)(a) of the GDPR, the processing will only be lawful where the child is at least 16 years old.
Article 8(1) further provides that:
• Where the child is below 16 years of age, the processing will only be lawful if consent is given or authorised by a person with parental responsibility over the child; and
• Member States may provide for a lower age of consent in the context of processing for information society services, provided that this is not lower than 13 years of age.

The Data Protection Act
Section 9 of the Act deals with child consent in relation to information society services. It provides that, in the UK, children of 13 years or age or older can give their consent to such processing. Children under the age of 13 will require the consent of a parent or guardian for the processing – provided that consent is relied upon as the legal basis. 
Notably, section 9 makes clear that the reference to “information society services” does not include preventative or counselling services – that is, children under 13 years of age will be able to give their consent to processing for those services.
Section 123(1) of the Act states that the Information Commissioner must prepare a code of practice on standards of age-appropriate design of relevant information society services which are likely to be accessed by children.