SG PDPA PDPC Advisory Guidelines on Children's Personal Data, Section 3.1 - Consent for Children Under 13
Obtain verified parental or guardian consent before collecting, using, or disclosing personal data of children under 13
Where this comes from
Provision: PDPC Advisory Guidelines on Children's Personal Data, Section 3.1 - Consent for Children Under 13
Instrument: Singapore Personal Data Protection Act (PDPA)
Citation: Personal Data Protection Commission (PDPC), Advisory Guidelines on Children's Personal Data (March 2024), Section 3.1; Personal Data Protection Act 2012 (No. 26 of 2012), Sections 13-17
Text version: PDPA 2012 (2020 Rev. Ed.); PDPC Advisory Guidelines on Children's Personal Data (2024)
Who it applies to
It applies when all of these are true:
- Youngest expected user age: Under 13
- Service requires/offers account registration
- Service is specifically designed for children under 18
Scope in the source's own terms
- Service collects data from minors
- Service available in Singapore
What engineering work it implies
- Parental Consent and ControlsCovers it fully
Implement verifiable parental consent for users under threshold age with ongoing parental controls.
Sample acceptance criteria Landfall generates for this obligation:
- Notification is sent within required timeframe (check regulation for deadline)
- Notification content is in plain language, readable by target audience
- Notification includes: what happened, why it matters, what to do next
- User can access notification history in their account settings
- Necessary notification delivery outcomes use scoped references, channel and attempt time without message bodies or extra recipient data
Evidence an auditor expects
- Consent recordLog analysis
Parental consent records
Records of parental consent for processing minor's personal data
- Technical controlTechnical audit
Consent verification mechanism
Technical implementation to verify parental consent
Questions people ask
- Does SG PDPA PDPC Advisory Guidelines on Children's Personal Data, Section 3.1 - C… apply to my service?
- It applies when Youngest expected user age: Under 13; Service requires/offers account registration; Service is specifically designed for children under 18.
- From when does this apply?
- SG PDPA PDPC Advisory Guidelines on Children's Personal Data, Section 3.1 - C… applies from 1 March 2024. Its current status is: in force.
- What evidence does an auditor expect?
- Parental consent records; Consent verification mechanism.
Find out whether this one lands on you
Landfall's pre-scan answers the applicability question above for your product in minutes, then turns every obligation that applies into traceable engineering tickets with a citation chain your auditors can follow.
Not legal advice. Landfall maps regulatory obligations to engineering work for planning purposes. Its verdicts are not legal advice and create no attorney-client relationship — verify with qualified counsel before relying on them.