Children's privacy rights in Canada: how the law treats children's information, who can consent, and what the OPC expects from online services targeting minors.
This page provides legal information, not legal advice. Consult a qualified privacy lawyer or CIPP/C-accredited privacy professional before taking action on access requests, breach response, complaints to a Privacy Commissioner, or Federal Court applications.
Last verified: September 2026
TL;DR
Canadian law treats children's personal information as sensitive. Parents or guardians generally consent for younger children. The OPC considers under-13 as requiring parental consent, and Quebec's Law 25 treats under-14 similarly. Organizations marketing to children must obtain meaningful consent and limit collection to what is necessary.
Who consents for a child
For younger children, a parent or legal guardian must consent on their behalf.
As children mature, they acquire the capacity to make privacy decisions themselves. The OPC generally considers that children 13 and older can consent in routine situations, with parental involvement still appropriate for higher-risk activities.
Quebec's Law 25 treats children under 14 as requiring parental consent and sets strict rules for profiling.
Online services and children
Websites and apps directed at children must:
Avoid collecting more information than necessary.
Provide age-appropriate notices that children can understand.
Avoid behavioural advertising and profiling aimed at young people, with tracking off by default (a 2023 joint resolution of Canada's privacy commissioners; guidance rather than a statutory rule outside Quebec).
Offer strong default privacy settings.
Schools and children's records
Elementary and secondary schools are covered by provincial access-and-privacy laws, which generally give parents (and mature minors) access to the child's records.