The General Data Protection Regulation (GDPR) is a European Union regulation that becomes effective May 25, 2018. It gives users rights to and protection of their data. One of the aspects of the GDPR is that minors cannot have their personal data sent to parties that their parent or guardian hasn't approved. The specific age defined as a minor depends on the region where the individual is located.
Regions that have statutory regulations about parental consent include the United States, South Korea, the United Kingdom, and the European Union. For those regions, a minor will be blocked (via Microsoft Entra ID) from getting any new Office Add-ins from the Store and running add-ins that were previously acquired. For countries/regions without statutory regulations, there will be no download restrictions.
A user is determined to be a minor based on data specified in Microsoft Entra ID. The organization admin is responsible for declaring the legal age group and the parental consent for that user.
If the parent/guardian consents to a minor using a specific add-In, then the organization admin can use centralized deployment to deploy that add-In to all minors who have consent.
To be GDPR compliant for minors you need to ensure that one of following builds is deployed in your school/organization.
For Word, Excel, PowerPoint, and Project:
Platform
Build number
Microsoft 365 Apps for enterprise (Current Channel)
9001.2138
Microsoft 365 Apps for enterprise (Semi-Annual Enterprise Channel)