Children's Privacy and COPPA

What it is

T-Mobile states it does not intentionally collect data from children under 13 without parental consent and will delete such data if discovered.

Why it matters (compliance & governance perspective)

T-Mobile offers family plans and devices that minors actively use, creating a practical tension between this policy commitment and the reality of minors accessing services through family accounts.

Consumer impact (what this means for users)

While T-Mobile commits to COPPA compliance, the 'knowingly' qualifier and the family plan context mean that minors using lines on a parent's account may generate data that is collected and processed without specific parental consent mechanisms being triggered.

Institutional analysis (Compliance & governance intelligence)

REGULATORY LANDSCAPE: The Children's Online Privacy Protection Act, enforced by the FTC, prohibits collection of personal information from children under 13 without verifiable parental consent. T-Mobile's status as a telecommunications carrier rather than a traditional website operator creates some complexity in COPPA applicability, but the FTC has applied COPPA broadly to services that are directed to children or that knowingly collect data from children. The policy's 'not directed to children' assertion does not fully insulate the company from COPPA obligations where children use its services. GOVERNANCE EXPOSURE: Medium. The practical reality that minors routinely use T-Mobile services on family accounts creates a gap between the policy's COPPA disclaimer and actual data collection practices. The 'knowingly' qualifier in COPPA means T-Mobile may not be obligated to implement age-verification for all services, but FTC guidance suggests that constructive knowledge of child users can trigger obligations. The T-Mobile Kids Lines product, if offered, may create specific COPPA obligations. JURISDICTION FLAGS: COPPA applies nationally. California's Age-Appropriate Design Code Act may impose additional obligations regarding services that children are likely to access, including provisions related to default privacy settings and data minimization. This California law, if enforced, could create obligations beyond COPPA's baseline. CONTRACT AND VENDOR IMPLICATIONS: Family plan account structures where a parent is the account holder but minors are active users create questions about whether parental consent under the account agreement satisfies COPPA's verifiable parental consent requirement for each minor's data collection. COMPLIANCE CONSIDERATIONS: Legal teams should assess whether the account enrollment process for family plans adequately captures parental consent for data collection from minor lines. The policy's deletion commitment for improperly collected children's data should be operationalized with a documented process. The California Age-Appropriate Design Code Act's requirements should be reviewed for applicability to T-Mobile's consumer-facing digital properties.

Applicable agencies

Applicable regulations

Provision details

Other risks in this policy

• Precise Geolocation Data Collection and Sharing high
• CPNI Use for T-Mobile Marketing medium
• Advertising Profiling and Third-Party Data Sharing high
• California Consumer Privacy Rights medium
• Data Retention medium
• Data Security and Breach Notification high