# POL-127 — The policy must state its position on minors under 16

> The privacy policy must state whether the business has actual knowledge that it sells or shares the personal information of consumers under 16.

- **Rule ID:** POL-127
- **Layer:** Policy pages (`POLICY_PAGE`)
- **Checks:** `privacy policy body`
- **Severity:** MEDIUM — Usually survives review, but lowers your trust score or invites manual review.
- **When it bites:** Gates approval — get this wrong and registration is refused
- **How it is detected:** AI judgement over the submitted form
- **Fix type:** Fix the privacy policy or SMS terms
- **Required by:** CCPA
- **Applies:** Applies to every 10DLC registration.
- **Canonical URL:** https://ekas.io/rules/10dlc/policy-page/pol-127/

## Why this rule exists

California treats under-16 data as requiring opt-in rather than opt-out, so the statement is the business declaring which regime it is in. For a messaging programme the answer should be trivially no, and saying so removes a question a reviewer would otherwise have to resolve from silence.

## How to fix it

Add the sentence to the CCPA section. Done when the document answers the question rather than leaving it to inference.

## Example of a compliant value

```text
We do not have actual knowledge that we sell or share the personal information of consumers under 16.
```