A child below the national age threshold uses an AI feature without the consent of a parent or guardian

Gate every AI feature on an age check and, for a user below the legal threshold, on a verified parental or guardian consent record.

Determine age at sign-up or first use of the AI feature (date of birth, an age-assurance result, or the account type), store it on the account, and check it in the request handler or middleware that fronts the model call. For a user below the threshold (14 in Italy), require a consent record from the parent or guardian (who consented, when, how they were verified, which AI features and processing it covers) and return a consent-pending response instead of calling the model when it is missing or withdrawn. Users at or above the threshold but under 18 may consent themselves only where the information on the processing is easy to find and written for them.

Where it goes: 1 application source code, 2 data models, 9 AI output handling, 14 user-facing text.

What reviewers look for: an age field or age-assurance result on the user model, and in the AI route a check of it that, for a user under the threshold, requires a parental consent record (parental_consent, guardian_consent, consenso_genitori) before the model call, with a consent-pending path when it is absent.

@app.post('/tutor')
def tutor(body: Ask, user=Depends(current_user)):
    age = years_since(user.birth_date)
    r = client.chat.completions.create(model=MODEL, messages=build(body, age))
    return {'reply': r.choices[0].message.content}

MIN_AGE_WITHOUT_PARENT = 14  # Law 132/2025 Art. 4(4)

@app.post('/tutor')
def tutor(body: Ask, user=Depends(current_user)):
    age = years_since(user.birth_date)
    if age < MIN_AGE_WITHOUT_PARENT and not consents.parental_consent(user.id, feature='tutor'):
        return {'status': 'parental_consent_required', 'consent_url': f'/parents/consent?child={user.id}'}
    r = client.chat.completions.create(model=MODEL, messages=build(body, age))
    return {'reply': r.choices[0].message.content}

Engineering guidance, not legal advice. Each provision below may add its own details (a cadence, a deadline, a required notice element): open it for those.