§ GDPR · Article 8

GDPR Article 8: Obligations, Deadlines & Penalties

Regulation (EU) 2016/679, Article 8 · All obligations · GDPR
At a glance
Article 8 of the GDPR imposes 2 obligations on controller.
§ Obligations

All obligations under Article 8

Obligation 1
Process personal data of a child only if the child is at least 16 years old, or if consent is given or authorized by the holder of parental responsibility for children below 16. Regulation (EU) 2016/679, Article 8, Article 8
Obligated entity
controller
Sector scope
information society services
Action required
verify
Deadline
Penalty
Obligation 2
Make reasonable efforts to verify that consent is given or authorized by the holder of parental responsibility over the child, taking into consideration available technology. Regulation (EU) 2016/679, Article 8, Article 8
Obligated entity
controller
Sector scope
information society services
Action required
verify
Deadline
Penalty
§ Frequently asked

Questions about Article 8

Who must comply with Article 8 of the GDPR? +
controller.
What does Article 8 of the GDPR require? +
verify
Need a cross-border briefing on GDPR Article 8?
Search Fontvera ↵
All EU obligation pages  ·  All GDPR articles