Serves under-18s, in Kiribati

Data Protection Act 2025, s. 12 (consent for children and individuals lacking capacity) · Read the law's page

• Obtain consent from a parent, guardian, or other appropriate legal representative before relying on the consent of a data subject who is under eighteen or otherwise lacks legal capacity, wherever the Act requires the data subject's consent for a lawful basis, retention, an automated decision, or a cross-border transfer.
• Obtain that same consent from a parent, guardian, or other appropriate legal representative before relying on a data subject's voluntary provision of personal data as a lawful basis, where the data subject is under eighteen or otherwise lacks legal capacity.
• Let a parent, guardian, or other appropriate legal representative exercise a data subject's rights or lodge a complaint on behalf of a data subject who is under eighteen or otherwise lacks legal capacity.
• Treat the parental or guardian consent requirement as not applying to processing carried out for education, medical, or social care by a professional owing a duty of confidentiality, to processing necessary for court proceedings concerning the individual, or to a child of thirteen or older requesting an online service directly.