GDPR: What should I think about when processing personal data from minors?

Minors (children below the age of 18 year) have the right to specific protection, as they are often less aware of their rights, the possible risks and consequences associated with the processing of their personal data.


Children must be informed about which data are collected, what they will be used for, what the risks, rules, guarantees and rights are and how they can exercise their rights with regard to the processing. It is the task of the researcher to inform children in a clear and comprehensible manner, using a medium that connects with the child's world and discernment. It is important to note that children do not lose their right to be informed if the research requires consent from the parents/guardian. In this case, both parents/guardian and children must be informed in an appropriate manner.

Legal ground

A legal ground is also required for the collection of personal data from children. This will often be public interest, legitimate interest or consent in the context of scientific research. If personal data of minor children (-18 years) is collected and processed on the basis of consent, the researcher must request the consent of the person who has the parental responsibility.

Regardless of the legal ground, it is recommended from an ethical point of view to also ask the minors themselves for permission or consent.

More tips

Translated tip

Last modified Oct. 29, 2020, 11:51 a.m.