Age matters at the moment you first record someone. Once their data is in, you already hold it. The children's privacy page shows, for every route by which a person first reaches you, whether it asks their age and whether it tests the answer, and how many parental consents you can produce.
Who can do this
An owner, editor or contributor of your workspace can add age rules and record parental consent. A viewer can read the page.
Find the page
Open Records & controls → Children’s privacy.
The page keeps three duties apart, and never adds them into one verdict:
- Verify age
- Get a parent’s consent
- Take care profiling children
Under What the Act expects, the page summarises each one against the Nigeria Data Protection Act 2023 and the NDPC's General Application and Implementation Directive 2025. It is a summary to help you find the gaps, not legal advice. Read it against the law and any sector rules that apply to you, and take advice before you rely on it.
Record an entry point
An entry point is any route by which a person first gets into your systems: the app, the website, a branch counter, an agent with a phone.
- Press Add an age rule.
- Give the Activity reference the entry point belongs to, and the Age-check method, such as a typed birth date or a check against an identity number.
- Answer Is the check in place? with Missing, Partly in place, In place or Failing.
- Check your entries and create the record.
Under Where you meet someone new, each entry point then reads as one of Asked and tested, Asked, taken on trust, Tested, never asked or No check at all.
A typed birth date that nothing tests is weak evidence. It looks like a control, but it cannot tell a wrong birth date from an honest one.
Record a parent's consent
Where you rely on consent and the person is under 18, the consent comes from a parent or guardian, and you have to be able to produce it.
- Press Record parental consent.
- Give the Subject reference from your data subjects register.
- If the evidence is kept in Asiri, tick Evidence is held in Asiri. Otherwise write Where the evidence is held.
- Press Record parental consent.
This records that consent is held. It does not upload the evidence. Consents recorded as held somewhere else, such as a branch file, count as not producible on the page, because nobody can show them on the day they are asked for.
Say whether a child could be involved
The page counts how many of your processing activities say a child may be involved, how many say no child is involved, and how many have never been asked. Never asked is not the same as no. Open each activity under Processing activities and answer the question.
Profiling
Nothing in Asiri records which models score which people, so the page cannot tell you whether your profiling of children is fair. Examine it in an impact assessment instead.
Common questions
"Is asking for a birth date enough?" Asking is the first step. If nothing tests the answer, it is taken on trust.
"Our consent forms are in a branch file. Do they count?" They may be valid, but the page counts them as not producible until you can show them.