Spotify collects data about younger users and requires parental consent for Managed Accounts; tailored advertising is off by default for younger users but automatically activates when they reach a certain age.
If you have a younger family member using Spotify under a Managed Account, their data is collected and tailored advertising will be automatically turned on when they reach the applicable age threshold, with only an in-app notification as disclosure.
Cross-platform context
See how other platforms handle Children and Managed Accounts and similar clauses.
Compare across platforms →The automatic activation of tailored advertising upon reaching a threshold age — communicated only via an in-app message — may not constitute adequate parental or user consent under COPPA and state minor privacy laws.
(1) REGULATORY FRAMEWORK: COPPA (15 U.S.C. §6501 et seq., 16 C.F.R. Part 312) requires verifiable parental consent before collecting personal information from children under 13. The FTC is the primary enforcement authority. California Age-Appropriate Design Code Act (CAADCA, AB 2273) imposes additional obligations for services likely to be accessed by minors under 18, including privacy by default and data minimization. Several other states have enacted or are enacting similar minor privacy legislation (Texas, Florida, etc.). (2)
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.