Conditions applicable to child’s consent

8.(1) The processing of a child’s personal data shall be lawful only where and to the extent that consent is given or authorised by the parent or guardian of the child.

(2) The data controller shall make reasonable efforts to verify in such cases that consent is given or authorised by the parent or guardian of a child, taking into consideration available technology.

(3) Subsection (1) shall not affect contract law under any enactment in respect of the validity, formation or effect of a contract in relation to a child.