Last Change:
10/08/2026
Data Protection Act, 2021
Original names of the law: Data Protection Act, 2021
Year: 2021
Type: Domestic law
Rights Category: Family life
Description
An Act to provide an effective system for the use and protection of personal data; regulate the collection, use, transmission, storage and otherwise processing of personal data; establish the Office of the Data Protection Commissioner and provide for its functions; the registration of data controllers and licencing of data auditors; provide for the duties of data controllers and data processors; provide for the rights of data subjects; and provide for matters connected with, or incidental to, the foregoing.
Selected provisions
17. Processing of child and vulnerable person’s personal data
(1)
Where a data subject is a child or a vulnerable person, that data subject’s right may be exercised by that data subject’s parents, legal guardian or a person exercising parental responsibility as the case may be.
(2)
A data controller shall not process a child’s or vulnerable person’s personal data unless consent is given by the child’s or vulnerable person’s parent, legal guardian or a person exercising parental responsibility.
(3)
A data controller shall, where the personal data of a child or a vulnerable person is involved, make every reasonable effort to verify that consent has been given or authorised, taking into account available technology.
(4)
A data controller shall incorporate appropriate mechanisms for age verification and parental consent in the processing of personal data of a child.