#
Minors' data receives clear sensitive-category and parental-consent treatment with active 2025-2026 filing enforcement, but dependent-adult protections and minor-specific profiling bans were not located in this research pass.
Sub-modules (5)
Age VerificationAmber
The operative age threshold for heightened protection is 14 years; the December 2025 CAC directive requires filings on the nature, categories and volume of minors' personal information collected, implying an age-identification/verification compliance step, though no standalone age-verification technical mandate was located.
Claims (1):
- PIPL classifies the personal information of minors under the age of 14 as sensitive personal information, and CAC's 2019 Provisions on Cyber Protection of Children's Personal Information (China's COPPA-equivalent) requires parental/guardian consent for handling children's data; a CAC directive issued 28 December 2025 further requires companies collecting minors' personal information to complete compliance audits and file supporting materials with local CAC offices by 31 January 2026.
Parental ConsentGreen
PIPL treats personal information of minors under 14 as sensitive personal information, requiring parental or guardian consent for processing, building on the 2019 Provisions on Cyber Protection of Children's Personal Information.
Claims (1):
- PIPL classifies the personal information of minors under the age of 14 as sensitive personal information, and CAC's 2019 Provisions on Cyber Protection of Children's Personal Information (China's COPPA-equivalent) requires parental/guardian consent for handling children's data; a CAC directive issued 28 December 2025 further requires companies collecting minors' personal information to complete compliance audits and file supporting materials with local CAC offices by 31 January 2026.
Minor Profiling BansRed
No standalone algorithmic-profiling ban specific to minors, distinct from PIPL's general ADM transparency/opt-out rules, was identified in this research pass.
Education SettingsRed
No education-setting-specific children's data protection rule was identified in this research pass.
Dependent AdultsRed
PIPL allows close relatives to exercise a deceased individual's data protection rights, but no dedicated regime for living dependent adults (elderly or mentally incapacitated persons) was identified.
Claims (1):
- PIPL permits close relatives of a deceased individual to exercise that individual's data protection rights, but no equivalent statutory protection specific to living dependent adults (e.g., elderly or mentally incapacitated persons) was identified.
Sources and claims (2)
- ProbableIAPP — PIPL classifies the personal information of minors under the age of 14 as sensitive personal information, and CAC's 2019 Provisions on Cyber Protection of Children's Personal Information (China's COPPA-equivalent) requires parental/guardian consent for handling children's data; a CAC directive issued 28 December 2025 further requires companies collecting minors' personal information to complete compliance audits and file supporting materials with local CAC offices by 31 January 2026.observed
- UncertainOneTrust DataGuidance — PIPL permits close relatives of a deceased individual to exercise that individual's data protection rights, but no equivalent statutory protection specific to living dependent adults (e.g., elderly or mentally incapacitated persons) was identified.observed