Yes. A child is anyone under 18. Before processing a child's personal data, a Data Fiduciary must get verifiable consent of the parent or lawful guardian. It must not undertake tracking, behavioural monitoring or targeted advertising directed at children, nor processing likely to cause detrimental effect on their well-being. The Rules exempt certain classes (for example healthcare and educational institutions) for specified purposes. Breaching these duties can lead to a penalty up to Rs 200 crore.