Rule 11 — DPDP Rules, 2025
In the case of a person with disability, verifiable consent of the lawful guardian shall be obtained after verification of the lawful guardian appointment, in addition to verification of the identity of the lawful guardian.
Source: Digital Personal Data Protection Rules, 2025. Official text available at truconsent.io/resources/dpdp-rules.pdf.
Rule 11 applies a stricter standard than Rule 10. For children, the Data Fiduciary verifies that the consenting person is the parent (identity verification). For persons with disability, the Data Fiduciary must verify two things: (1) that the guardian is who they say they are (identity verification, same as Rule 10), and (2) that the guardianship is legally valid — i.e., the guardian has actually been appointed as such under the relevant law. A family member who provides informal care but has no legal guardianship appointment does not satisfy Rule 11.
A legal guardianship order from a court, or a certificate of guardianship under the National Trust Act, 1999, or equivalent legal documentation. The Data Fiduciary must verify that this documentation is authentic and current. A guardian who was appointed but whose appointment has been revoked is no longer a valid guardian.
Rule 10 (children): verify that the consenting adult is the parent. Rule 11 (persons with disability): verify that the consenting adult is the parent or guardian, AND that their guardianship is legally valid. Rule 11 adds a guardian-validity check that Rule 10 does not require.