The Children's Online Privacy Protection Act imposes requirements on operators of commercial websites and online services directed to children under 13, or that have actual knowledge they are collecting personal information from children under 13.
COPPA requires operators to post a clear and comprehensive privacy policy, provide direct notice to parents, obtain verifiable parental consent before collecting personal information from children, give parents the choice to consent to collection without consenting to disclosure to third parties, provide parents access to their child's information, give parents the ability to prevent further use or collection, and maintain the confidentiality, security, and integrity of collected information.
The FTC has actively enforced COPPA with significant penalties. Notable enforcement actions include a $170 million fine against YouTube/Google (2019), a $275 million fine against Fortnite maker Epic Games (2022), and ongoing investigations into social media platforms' compliance with children's privacy requirements. The FTC has proposed updates to COPPA rules to address modern data practices including targeted advertising to children.
Get alerted when platforms change their policies — including COPPA-relevant provisions.
Subscribe to Watcher — $9.99/mo