Children aged 13 to 17 can use Spotify only with parental consent, and parents who enable kids access under a family subscription are confirming they are the legal guardian and are giving consent on behalf of the child.
Parents who enable minor access under a family subscription bear full legal responsibility for the minor's use, including compliance with content guidelines, and Spotify relies on parental self-attestation rather than verified consent, creating potential data protection risk for children.
Cross-platform context
See how other platforms handle Minor User Access Under Family Subscription and similar clauses.
Compare across platforms →The Terms place full responsibility for minors' consent on parents rather than verifying guardian status, which may not satisfy COPPA's verifiable parental consent requirements for users under 13.
(1) REGULATORY FRAMEWORK: This provision directly implicates COPPA (15 U.S.C. §6501 et seq., 16 C.F.R. Part 312) for users under 13, requiring verifiable parental consent before collecting personal information from children. It also engages GDPR Art. 8 (conditions applicable to children's consent, with member state variations between ages 13–16), UK GDPR and the ICO Age Appropriate Design Code (UK Children's Code), and FTC Act Section 5. The FTC and ICO are primary enforcement authorities. The minimum age of 13 aligns with COPPA but the self-attestation mechanism may not satisfy verifiable parental consent requirements. (2)
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.