The Children’s Online Privacy Protection Act (COPPA) is a U.S. federal law designed to protect the privacy of children under the age of 13 who use online services. Here’s a brief overview:

What is COPPA?

COPPA was enacted in 1998 and became effective in 2000. It places strict requirements on operators of websites, online services, and mobile apps that are directed to children under 13 or knowingly collect personal information from children under 13.

Purpose of COPPA

The primary goal of COPPA is to give parents control over what information is collected from their young children online. It aims to protect children’s privacy and ensure their personal information is handled responsibly.

Scope of COPPA

COPPA applies to:

Operators of commercial websites and online services (including mobile apps and IoT devices) directed to children under 13.

Third parties (such as ad networks) that collect personal information through these sites and services.

Key Requirements

Parental Consent: Operators must obtain verifiable parental consent before collecting, using, or disclosing personal information from children.

Privacy Policies: Websites and services must post clear and comprehensive privacy policies detailing their information practices.

Data Security: Operators must take reasonable measures to protect the confidentiality, security, and integrity of the personal information collected from children.

Resources

https://www.ftc.gov/legal-library/browse/rules/childrens-online-privacy-protection-rule-coppa