Apple states it does not knowingly collect personal data from children under 13 without parental consent, and will delete such data if discovered — parents are encouraged to supervise children's Apple device use.
If your child is under 13 and uses an Apple device or service, Apple requires parental consent before collecting personal data — parents should set up Family Sharing and Screen Time controls to manage children's Apple account data.
How other platforms handle this
You can access and control your personal data that Microsoft has collected, and exercise your data protection rights, by using various tools we provide. The Privacy Dashboard at account.microsoft.com/privacy allows you to view and clear much of the data we hold about you. You have rights to access, ...
With Our Affiliates. Where appropriate, we may disclose your information with BAM Management US Holdings Inc, and its wholly-owned subsidiaries and/or affiliates in the course of conducting business and offering our Services to you. With Service Providers. We may disclose your information on a confi...
Your personal information may be transferred to and processed in countries outside your country of residence, including the United States and Israel, which may have data protection laws that differ from those in your country. We rely on appropriate safeguards, such as standard contractual clauses ap...
Children's privacy is protected by federal law (COPPA) and Apple's policy commits to COPPA compliance, but the practical effectiveness depends on age verification mechanisms which Apple does not detail fully in this policy.
(1) REGULATORY FRAMEWORK: Children's data collection is governed by COPPA (15 U.S.C. §6501, 16 CFR Part 312) enforced by the FTC — requires verifiable parental consent before collecting personal information from children under 13. GDPR Art. 8 sets age of consent at 16 (member states may lower to 13) for information society services — enforced by EU DPAs. UK Age Appropriate Design Code (Children's Code) imposes additional requirements for services likely to be accessed by children — enforced by the ICO. KISA (Korean Information Security Act) and equivalent APAC frameworks impose parental consent requirements. (2)
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.