There is an age limit of 16 years for a child's consent to the data processing of an information society service. If the child has not yet reached the age of sixteen, the holders of parental responsibility must consent. However, Member States may lower this age limit:

Art. 8 I 3 GDPR: "Member States may provide by law for a lower age for those purposes provided that such lower age is not below 13 years."