Skip to main content

Section 9 · Rules 10–11

Children and guardians

Children's data needs a parent's or lawful guardian's consent. This page explains the age rule, how guardian access works, and what changes when a child turns 18.

Last updated: 28 October 2026

You must be 18 to have your own account

Every sign-up path, including registration at a hospital desk, asks for a date of birth and checks that the person is 18 or older. When a hospital desk registers a child, a parent or guardian must be present, and staff record that they gave the privacy notice.

Guardian access to a child's profile

  • A parent or lawful guardian manages a child’s profile. They request authority, and it is reviewed before it is granted.
  • Guardian authority is approved only for a guardian whose own ABHA is KYC-verified and shows they are 18 or older. This is checked again every time the authority is used.
  • Authority is limited in scope (view, or view and edit profile details) and has an expiry and review date. It cannot rewrite a child’s clinical history.
  • Authority can be withdrawn from the Privacy Centre, and the withdrawal is recorded.

When a child turns 18

  • Guardian access ends automatically at 18.
  • The young adult can claim their profile from their own patient account. The claim needs their own KYC-verified ABHA with matching name and date of birth, and is reviewed before approval. The former guardian cannot make the claim.
  • On approval the profile moves to the adult’s account and all guardian authority for it is removed.

No tracking or targeted advertising

We do not track children's behaviour, profile them or show them targeted advertising. We do not show advertising to anyone.

Persons with disability

An adult with a disability who cannot make decisions alone may have a lawful guardian act for them, as the Act allows.