Verifying parental consent without collecting more data

The instinct when a regulation says 'verify' is to collect more identity documents. That's exactly the wrong direction for a data minimization law — the more identity data you hold on a child's guardian, the bigger the breach surface you've created to satisfy a consent requirement.

Verification without a document vault

A DigiLocker-based verification flow confirms a guardian relationship without your product ever storing the underlying identity document. You get a verified yes/no and an auditable trail of the verification event — not a folder of scanned Aadhaar cards sitting in your database as a liability.

The safest identity document to hold is the one you never had to store in the first place.