Law Atlas

How The Law Decides
Sign In
Text size
100%
Theme
Regulation

Children's Online Privacy Protection Act (COPPA)

Data Privacy and Protection Law

The Children's Online Privacy Protection Act is a United States federal law, enacted in 1998, that regulates the online collection of personal information from children under the age of thirteen. It requires operators of websites and online services directed at children to obtain verifiable parental consent before collecting, using, or disclosing a child's personal information, and to post a clear privacy policy describing their data practices. The Act is enforced by the Federal Trade Commission, which has also issued an implementing rule, the COPPA Rule, that has been periodically updated.

Facts
EraSourced to the subject's own account
Enacted 1998; effective April 21, 2000. 1
Promulgated BySourced to the subject's own account
United States Congress. 1
Jurisdiction ScopeSourced to the subject's own account
United States federal law; applies to persons or entities under U.S. jurisdiction, including services directed at children outside the U.S. when the operator is U.S.-based. 1
Regulatory DomainSourced to the subject's own account
Online collection of personal information from children under 13. 1
Classification
Legal StatusSourced to the subject's own account
in-force 1
Jurisdiction Scope
Jurisdiction Scope (category)Sourced to the subject's own account
Federal 1
Era
Era (category)Sourced to the subject's own account
20th Century (1900-1999) 1
FAQs

Who must comply with COPPA?

Operators of online services directed at children under 13, including U.S.-based operators serving children abroad.

COPPA applies to operators of websites and online services directed at children under 13 who collect personal information. It applies to persons or entities under U.S. jurisdiction, including services directed at children outside the U.S. when the operator is U.S.-based.

What does COPPA require before collecting a child's information?

Verifiable parental consent and a clear privacy policy.

Operators must obtain verifiable parental consent before collecting, using, or disclosing a child's personal information, and must post a clear privacy policy describing their data practices. The Federal Trade Commission enforces the Act.
Connections

Associated With

both are core US federal sectoral privacy statutes in the absence of a comprehensive federal privacy law

The Federal Trade Commission enforces COPPA under its own statute.

Source General Data Protection Regulation (Wikipedia)

In Legal System

United States federal statute, within the common law tradition.

Source Major Legal Systems in the World TodayRene David and John E.C. Brierley
Sources
1. Children's Online Privacy Protection Act (Wikipedia)
Wikipedia
  • Lead paragraph (era)
    The Children's Online Privacy Protection Act of 1998 (COPPA) is a United States federal law. The act, effective April 21, 2000, applies to the online collection of personal information by persons or entities under U.S. jurisdiction about children under 13 years of age, including children outside the U.S. if the website or service is U.S.-based. It details what a website operator must include in a privacy policy, when and how to seek verifiable consent from a parent or guardian, and what responsibilities an operator has to protect children's privacy and safety online, including restrictions on the marketing of those under 13.
  • Lead paragraph (promulgated-by)
    The Children's Online Privacy Protection Act of 1998 (COPPA) is a United States federal law. The act, effective April 21, 2000, applies to the online collection of personal information by persons or entities under U.S. jurisdiction about children under 13 years of age, including children outside the U.S. if the website or service is U.S.-based. It details what a website operator must include in a privacy policy, when and how to seek verifiable consent from a parent or guardian, and what responsibilities an operator has to protect children's privacy and safety online, including restrictions on the marketing of those under 13.
  • Lead paragraph (jurisdiction-scope)
    The Children's Online Privacy Protection Act of 1998 (COPPA) is a United States federal law. The act, effective April 21, 2000, applies to the online collection of personal information by persons or entities under U.S. jurisdiction about children under 13 years of age, including children outside the U.S. if the website or service is U.S.-based. It details what a website operator must include in a privacy policy, when and how to seek verifiable consent from a parent or guardian, and what responsibilities an operator has to protect children's privacy and safety online, including restrictions on the marketing of those under 13.
  • Lead paragraph (regulatory-domain)
    The Children's Online Privacy Protection Act of 1998 (COPPA) is a United States federal law. The act, effective April 21, 2000, applies to the online collection of personal information by persons or entities under U.S. jurisdiction about children under 13 years of age, including children outside the U.S. if the website or service is U.S.-based. It details what a website operator must include in a privacy policy, when and how to seek verifiable consent from a parent or guardian, and what responsibilities an operator has to protect children's privacy and safety online, including restrictions on the marketing of those under 13.
  • In Group: United States Privacy Statutes, Introduction, sentence 2
    The act, effective April 21, 2000, applies to the online collection of personal information by persons or entities under U.S. jurisdiction about children under 13 years of age, including children outside the U.S. if the website or service is U.S.-based.
View the Source
Major Legal Systems in the World Today
Rene David and John E.C. Brierley, Stevens and Sons, 1985In Legal System: Law of the United States
General Data Protection Regulation (Wikipedia)
Associated With: General Data Protection Regulation (GDPR), Lead section (special protection for children's data)
Quote, Associated With: General Data Protection Regulation (GDPR), Lead section (special protection for children's data)
unless these interests are overridden by interests of the data subject or her or his rights according to the Charter of Fundamental Rights (especially in the case of children)
View the Source

Take a Related Quiz

Comments (0)
No comments yet. Be the first to share a thought.
Reader Challenges (0)
No disputes yet. Spotted an error or a better source? Open the first one.