WhatsApp Tests Age Verification in India Ahead of 2027 Child-Data Rules

WhatsApp is testing an optional age-verification prompt in India as platforms prepare for DPDP requirements that will mandate verifiable parental consent for users under 18 from May 13, 2027.

— Source publishedTue, 4 Aug, 2026, 17:30 IST·First seen Tue, 4 Aug, 2026, 18:29 IST·Source NDTV Profit

What happened

WhatsApp is testing optional age verification in India ahead of DPDP child-data rules, which will require verifiable parental consent for users under 18 from

Key facts

  • May 13, 2027
  • 18 years
  • August 2023
  • Rule 10
  • Section 9

Why this matters

Prioritize partnerships or acquisitions in age assurance, parental-consent and privacy infrastructure as Indian platforms prepare for a mandatory 2027 compliance transition.

What to watch

  • Meta expanding the India test from optional prompts to mandatory age assurance, account restrictions or Business API eligibility rules.
  • Publication of final DPDP rules defining verifiable parental consent, acceptable age-verification methods, exemptions and enforcement standards.
  • Indian retail, marketplace, food-delivery or gaming platforms introducing age gates or guardian-linked accounts ahead of May 2027.
  • Early enforcement notices, penalties or complaints involving child-data collection, targeted advertising or influencer-led commerce.
  • Changes in WhatsApp Business Platform documentation governing messaging to minors, catalog access, payments or ad targeting.
  • Audit WhatsApp Business, click-to-WhatsApp, catalog, loyalty and chatbot journeys for collection or use of data that could involve users under 18.
  • Create age-based audience suppression rules and a parental-consent workflow that can be activated without rebuilding CRM systems.
  • Separate transactional customer-service communications from promotional messaging, with stricter logging of consent, age signals and opt-outs.
  • Review agency, chatbot, CDP, payment and customer-support vendors for DPDP-ready data-processing terms, retention controls and breach-response obligations.
  • Shift youth-oriented campaigns toward parent or guardian purchase journeys and contextual channels that require less individual-level profiling.