Okta's services are not for children under 16. If they discover they accidentally collected data from someone under 16, they will delete it.
This analysis describes what Okta's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes Okta's operational compliance framework with child privacy regulations by defining an age restriction on service access and establishing a deletion protocol for inadvertently collected child data. It allocates responsibility to both the service provider and users regarding age-gated access.
The removal of explicit children's privacy protections eliminates a clear commitment to not collecting data from minors under 16, which may reduce compliance clarity regarding COPPA and similar regulations.
View full change record →Children under 16 are categorically excluded from Okta's services and any data inadvertently collected from them will be deleted, but parents of US teenagers aged 13-15 should be aware that Okta does not provide COPPA-compliant parental consent mechanisms.
How other platforms handle this
You must be at least 13 years old to use our Services. If you are under 18, you must have your parent or guardian's permission to use our Services. Certain Services or features may have higher age requirements.
Without limiting the generality of the foregoing, any access to, or use of, the Service by anyone who is a minor (which is under the age of 18 in most jurisdictions) in any applicable jurisdiction (a "Minor") is strictly prohibited and in violation of these Terms, unless such access and/or use is su...
"Our websites and services are not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If you are under 16 years of age, please do not use or access our websites or services. If we learn that we have collected personal information from a child under 16, we will take steps to delete such information as soon as possible.Excerpt from Okta's Privacy Policy
(1) REGULATORY FRAMEWORK: This provision implicates COPPA (15 U.S.C.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes Okta's operational compliance framework with child privacy regulations by defining an age restriction on service access and establishing a deletion protocol for inadvertently collected child data. It allocates responsibility to both the service provider and users regarding age-gated access.
Children under 16 are categorically excluded from Okta's services and any data inadvertently collected from them will be deleted, but parents of US teenagers aged 13-15 should be aware that Okta does not provide COPPA-compliant parental consent mechanisms.
ConductAtlas has identified this type of provision across 2 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Okta.