Starting December 2025, India’s draft Digital Personal Data Protection Rules will require online platforms to verify users’ age for age-restricted services. While not all users must prove their age universally, platforms must ensure minors are identified and protected—using methods like tokenization to balance privacy with safety.
Online Age Verification in India: Who Needs to Prove Their Age After December 2025?
As part of India’s evolving digital safety framework, the Digital Personal Data Protection Rules, 2025 will introduce mandatory age verification for certain online services starting December 2025. The move aims to protect minors from online harm while ensuring platforms remain compliant with data protection norms.
Key Highlights from the New Age Verification Framework:
Not Everyone, But Many Will Be Affected
The rules do not require universal age verification for all internet users.
Instead, platforms offering age-restricted services—such as gaming, social media, or content platforms—must verify if a user is a minor (under 18).
How Will Age Be Verified?
Platforms can use ID tokenization, a privacy-preserving method that confirms age without storing personal data.
In the case of minors, parental or guardian consent will be required for access to certain services.
Who Must Comply?
All digital platforms operating in India, including global tech giants, must implement age verification mechanisms.
The rules apply to services that collect personal data or offer content unsuitable for children.
Privacy Concerns Addressed
Minister for Electronics and IT Ashwini Vaishnaw emphasized that the system was designed in consultation with the tech industry to avoid privacy violations.
Tokenization ensures that sensitive data is not stored or misused, addressing public concerns.
Global Context
India joins a growing list of countries enforcing age assurance laws, including the UK, US, and EU.
However, there is no global standard, leading to a “legal patchwork” across jurisdictions.
Impact on Users and Platforms
Users may experience additional verification steps when signing up for or accessing certain services.
Platforms must update their terms of service, consent flows, and backend systems to comply.
While the rules aim to create a safer digital space for children, they also raise questions about user experience, data handling, and platform accountability. The coming months will be crucial as platforms adapt to the new compliance landscape.
Sources: The Hindu, IAP, Ansari Sahab News