The DPDP Act defines a child as someone below the age of 18, and mandates that parental consent is required to process the data of a child.