Minors Data Collection Prohibition

What it is

The notice states that Experian does not collect, sell, share, or disclose personal information of individuals under 16 years of age.

Why it matters (compliance & governance perspective)

This provision establishes a categorical prohibition on data collection and sale for minors under 16, which aligns with the CCPA's prohibition on selling personal information of minors under 16 without affirmative authorization. No mechanism is described for age verification or for addressing cases where a minor's data may have been collected without Experian's knowledge.

Consumer impact (what this means for users)

Under this provision, Experian asserts that it does not collect, sell, share, or disclose personal information of individuals under 16. The notice does not describe the technical or procedural mechanisms used to identify and exclude minors from data collection.

Institutional analysis (regulatory & governance intelligence)

1. REGULATORY LANDSCAPE: This provision engages the CCPA's prohibition on selling personal information of minors under 16 without opt-in consent, COPPA's requirements for children under 13, and analogous protections under state privacy statutes. The FTC has enforcement authority over COPPA, and state Attorneys General may enforce state-specific minors protections. The prohibition on selling data of minors under 16 reflects a CCPA-specific threshold that exceeds the federal COPPA age of 13. 2. GOVERNANCE EXPOSURE: Medium. The provision is stated as a categorical commitment, but the notice does not describe the age verification or data screening mechanisms used to ensure compliance. Given that Experian collects data from public records, affiliates, and other authorized data compilers, the operational reliability of this prohibition depends on data sourcing controls not described in the notice. 3. JURISDICTION FLAGS: California imposes the 16-year-old threshold for minor data sales under the CCPA. COPPA applies federally to data collected from children under 13 with knowledge of their age. State privacy statutes in Delaware, New Jersey, and other jurisdictions impose additional protections for minors. 4. CONTRACT AND VENDOR IMPLICATIONS: Data supplier agreements should include representations and warranties that data provided to Experian does not include personal information of individuals under 16. The adequacy of these representations should be assessed as part of vendor due diligence. 5. COMPLIANCE CONSIDERATIONS: Compliance teams should evaluate the technical controls used to identify and exclude minors from data collection, processing, and sale pipelines, particularly given the breadth of data sources described in the notice including public records, affiliates, and consumer survey companies. The prohibition should be reviewed against COPPA requirements for any Experian services that may be accessed by children under 13.

Applicable agencies

Provision details

Other risks in this policy

• Commercial Transactions Data Collected and Sold high
• Consumer Inferences Drawn and Sold to Third Parties high
• Consumer Right to Delete Personal Information high
• Consumer Right to Know and Access Personal Information high
• Financial Account Credentials Sensitive Data Collected and Sold high
• Geolocation Data Collected and Sold to Third Parties high