Asia: Privacy

Businesses increasingly interact with minors through education platforms, gaming applications, social networks, healthcare services, retail platforms and digital entertainment. In India, Parental Consent has become a central compliance consideration for organisations processing children's personal data under the Digital Personal Data Protection Act, 2023.

The Australian Privacy Commissioner has determined that Monash IVF and a telehealth company have interfered with the privacy of website visitors via tracking pixels, without obtaining end-user consent.

Every time a person clicks “I agree” on a website, downloads an app or opens a bank account, a separate act of consent may be given to an organisation processing that person’s personal data. Until recently, there has been no mechanism under Indian law through which an individual could manage, in one place, the consents given to different organisations, including reviewing and withdrawing those consents.