Legal Register
Control Workpaper
OBL-30 Rule 11 RULE-11

OBL-30: Child-Safe Data Processing Defaults (Rule 11)

Enforces child-safe processing architecture and strict safeguard defaults under Rule 11.

Statutory scope: Rule 11 · Assigned to Product / guardian assurance · Systems: Separate CASE-101 fixture; not Company child lending

Operational Interface Requirement

Recommended interface: Supply a valid parent token for prohibited targeting without an established applicable exception; expected outcome is deny. Verify each claimed exception separately.

Expected Audit Assertion / Test Result

Supply a valid parent token for prohibited targeting without an established applicable exception; expected outcome is deny. Verify each claimed exception separately.

Governance & Architecture

Recommended Activity Owner
Product / guardian assurance
Target Systems & Interfaces
Separate CASE-101 fixturenot Company child lending

Verification Specification & Workpaper

Proposed Test Specimen ID
SPEC-Q10-OBL-30

proposed per-row review/acceptance specification; not a claim of executed statutory coverage

Populated Teaching Workpaper
out/remediation/Q04/child-controls.json

populated hypothetical decision/specimen; not actual enterprise execution

Local Execution Reference
out/dossier/CASE-001/tests/results.json

Canonical Statutory Grounding

Source references verified against the official Gazette of India publication baseline.

RULE-11 Lines 1228–1267
Commencement: 2027-05-13 (scheduled, not yet operative)
Obligated Actor

Data Fiduciary; claimed lawful guardian

Trigger Context

Covered disability guardian consent

Statutory Conditions

Verify lawful appointment by court/designated authority/local committee under defined guardianship laws.

Statutory Exceptions

Covered disability definition includes inability despite adequate appropriate support.