View Rule

On July 25, 2019, the Commission requested public comment on its Children’s Online Privacy Protection Act Rule (COPPA Rule or Rule). 84 FR 35842 (July 25, 2019). The FTC sought comment on all major provisions of the COPPA Rule, including its definitions, notice and parental consent requirements, exceptions to verifiable parental consent, and safe harbor provision.  The Commission held a public workshop to review the COPPA Rule on October 7, 2019. The extended public comment period closed on December 11, 2019. FTC staff is continuing to review the comments received.

On May 19, 2022, the Commission issued a Policy Statement on Education Technology and the COPPA Rule. Going forward, the Commission will closely scrutinize the providers of these educational technology services and will act where providers fail to meet their legal obligations with respect to children’s privacy.

The Rule prohibits unfair or deceptive acts or practices in connection with the collection, use and/or disclosure of personal information from and about children under the age of 13 on the internet. The Rule requires operators of commercial websites and online services, with certain exceptions, to obtain verifiable parental consent before collecting, using, or disclosing personal information from or about children. An operator must make reasonable efforts, in light of available technology, to ensure that the person providing consent is the child's parent. The Commission amended the Rule in 2013 to, among other things, expand the definition of personal information covered by the Rule and to include in the definition of "website" and "online service directed to children," operators of online services with actual knowledge they are collecting personal information directly from users of other websites or online services directed to children.