New Delhi: In a recent briefing on the draft Digital Personal Data Protection Rules (DPDP Rules, 2025), Union IT Minister Ashwini Vaishnaw highlighted that the tech industry sees virtual tokens as the most practical solution for age verification.
This was part of the government’s broader efforts to ensure the protection of children’s personal data under the Digital Personal Data Protection Act (DPDP Act, 2023).
According to the new rules, platforms must obtain verifiable parental consent before processing the data of anyone under the age of eighteen. They are also required to take “appropriate technical and organisational measures” to ensure that parental consent is obtained before processing children’s data. Furthermore, platforms must verify both the identity and age of the parent giving consent on behalf of the child.
A Vision Backed by Digital India
Vaishnaw spoke about the digital infrastructure in India, emphasizing the role of the Digital India program, AADHAAR, and the payment system in supporting such innovations. “What we have in our country, thanks to the Digital India program, is a strong digital architecture. AADHAAR and the payment system provide us with excellent digital tools for identification,” he said, referencing the government’s decision to create a system for virtual tokens, which could allow for clear identification of both parents and children.
Vaishnaw pointed out that this solution, which comes with significant consultation from industry stakeholders, has been driven by input from the tech sector. “The industry believes that virtual tokens are the most practical approach,” he said, citing its success in areas like account aggregators.
How Virtual Tokens Will Function
Under the DPDP Rules, platforms will be able to use virtual tokens mapped to the identity and age details voluntarily provided by the parents. These tokens are designed to be highly verifiable using existing data points such as children’s health cards or bank account details. Vaishnaw explained that digital technology could facilitate a seamless, highly secure method of verifying whether someone is under the age of 18.
“Using these verified data points, we can create a highly verifiable way of ensuring accurate age identification,” he noted, emphasizing that the technology already exists to prevent minors from misrepresenting their age online.
An Evolving Solution
While the industry sees virtual tokens as a viable solution, Vaishnaw clarified that this would not be a universal, one-size-fits-all approach. “This solution will evolve, and it is not something set in stone. There is no universal solution for age verification in the world right now,” he remarked, explaining that the solution will continue to evolve over time. Regarding the potential role of the Automated Permanent Academic Account Registry for Students (APAAR IDs), Vaishnaw suggested that various companies could map age and identity to different forms of identification as the solution develops.
A Digital Footprint Already in Place
A key question raised during the briefing concerned the need for additional verification through virtual tokens. Vaishnaw reassured participants that platforms already collect significant amounts of personal data, such as mobile numbers, which are often provided voluntarily by users. He further pointed out that people are already sharing much more personal information with platforms than they may realize.
“You’re already giving your mobile number to social media platforms, along with other personal information like your preferences, choices, and hundreds of photographs,” Vaishnaw explained. “We are not asking you to share more than what you are already giving,” he added, making the case for why such verification mechanisms are not an intrusion, but an extension of existing practices.
As the government works towards finalizing the DPDP Rules, virtual tokens are expected to play a central role in securing children’s data and ensuring that platforms meet the required standards for consent verification. With input from the tech industry, this solution promises to evolve and adapt, creating a safer digital environment for children across India.
