Children's Online Privacy Protection Act of 1998 and COPPA Rule
COPPACOPPA requires notice to parents and verifiable parental consent before collecting personal information from children under 13 online. The FTC's COPPA Rule was substantially amended in 2025 (effective June 23, 2025, with most compliance required by April 22, 2026), adding separate consent for third-party disclosures, a written security program, a written retention policy, and biometric and government identifiers to the definition of personal information.
Jurisdiction
United States
Jurisdiction Type
federal
Country
United States
Effective Date
4/21/2000
Enforcing Authority
Federal Trade Commission; state attorneys general (parens patriae, 15 U.S.C. 6504)
Maximum Fine
Up to $50,120 per violation (adjusted for inflation)
Fines Under This Regulation
0
Total Fine Amount (USD)
--
Privacy Topics
Key Articles
| Article | Description |
|---|---|
| §312.2 | Definitions |
| §312.3 | Regulation of unfair/deceptive acts |
| §312.4 | Notice requirements |
| §312.5 | Parental consent |
| §312.6 | Right to review |
| §312.7 | Prohibition against conditioning |
| §312.8 | Confidentiality and security |
| §312.10 | Data retention and deletion |