Where the data subject is a minor (i.e. under the age of 18), any prescribed consent required for using personal data for a new purpose can be given on his or her behalf by an individual who has parental responsibility for the minor (see DPP 3 and Section 2(1) of the PDPO).