What Parents Should Know About COPPA
Short answer
COPPA, the Children’s Online Privacy Protection Act, is a U.S. law that protects children under 13 from having their personal information collected online without parental permission. It requires websites and apps to get verifiable consent from parents before collecting kids’ data. Parents should understand COPPA to help safeguard their child's privacy and know how to respond if a site isn’t following the rules.
What is COPPA in Plain Words?
The Children’s Online Privacy Protection Act (COPPA) is a federal law designed to protect the online privacy of children younger than 13 years old. Simply put, COPPA makes sure websites, apps, and online services cannot collect a child’s personal information unless a parent or guardian first gives permission. Personal information includes a child’s name, date of birth, address, phone number, email address, photos, or anything that can identify or contact the child.
COPPA applies to any website or app that is directed at children or knows that children under 13 are using it. For example, a website offering cartoons, games, or educational content aimed at kids must follow COPPA rules. This means the site has to clearly explain what information it collects, why it collects it, who can see it, and how it keeps it safe. More importantly, it must get a parent’s consent before collecting any personal data from a child.
This law helps ensure that children’s privacy is protected and that parents have control over what information is gathered about their kids online.
How Does COPPA Work? Step-by-Step with an Example
Under COPPA, before a site or app collects personal information from a child under 13, it must get “verifiable parental consent.” Here is how this process typically works:
Imagine your 8-year-old wants to use a new learning app that tracks progress and allows saving scores. When your child enters their birthdate and the app confirms they are under 13, the app must:
- Show a clear privacy notice explaining what information it will collect (such as name, email, or usage data), why it collects it, and how it will be used.
- Send a request to you, the parent, for consent. This could be through an email form, a consent button inside the app, or even a phone call option.
- Ask you to give explicit approval before any data is collected. This is often done by clicking a button that says, “I give my consent” or signing a digital form.
- Provide you with methods to review your child’s information or request deletion later.
For example, a consent message might say: “To create an account for your child and save game progress, we need your permission to collect their name and email. Please click ‘I Agree’ to allow this. Your child’s information will be kept private and secure.”
If you do not give consent, the app must either prevent your child from using the service or only allow limited use without collecting personal information. The company that runs the app is responsible for following these rules and protecting your child’s data.
This process ensures parents know exactly what data is collected, have control over it, and can protect their child’s privacy online.
Why Does COPPA Matter for Parents and Guardians?
COPPA matters because it puts parents in control of their children’s online privacy. Young children often do not understand the risks of sharing personal information online. Without COPPA, websites could collect data from kids without their parents’ knowledge, which can lead to privacy risks like unwanted marketing, data tracking, or misuse of information.
For parents, COPPA means:
- You have the right to be informed about and approve any collection of your child’s personal data.
- You can decide whether a website or app can collect information, and what kind of information it can gather.
- You can ask companies to delete your child’s information if you no longer want it stored.
- You can teach your child safe online habits by explaining why it’s important to ask permission before sharing information.
For example, if your child wants to download a new game, you can check whether the app asks for parental consent and how it handles children’s data. If the app doesn’t follow COPPA rules, you can choose not to let your child use it and report the issue. COPPA helps protect your child from being targeted by ads or tracked online without your approval.
What Terms Are Often Confused with COPPA?
Several privacy laws and terms are often mixed up with COPPA. Here’s a simple table to clarify:
| Term | What It Means | How It Differs from COPPA |
|---|---|---|
| FERPA (Family Educational Rights and Privacy Act) | Protects students’ educational records | Applies to schools and education data, not general online data collection |
| GDPR (General Data Protection Regulation) | European privacy law protecting personal data | Applies mostly to European citizens; different rules and age limits |
| Parental Controls | Settings to block or limit device or app usage | Not a law; tools parents use to control content, unrelated to data collection permissions |
| Data Privacy | General concept of protecting personal information | COPPA is a specific U.S. law focused on children under 13 and online data collection |
Knowing these differences helps parents understand which protections apply to their child’s online activity and when COPPA rules are in force.
What Should Parents Do to Protect Their Children Under COPPA?
Parents can take several clear steps to use COPPA protections effectively and keep their children’s information safe online:
- Review Privacy Policies Carefully: Before your child signs up for an app or website, read its privacy policy to find statements about COPPA compliance and parental consent procedures.
- Confirm Your Child’s Age: Encourage honest age reporting to ensure COPPA protections apply. If a site asks for birthdate, help your child enter it correctly.
- Give Verifiable Consent: When a site requests parental permission, follow the instructions exactly—whether clicking an “I Agree” button, replying to an email, or providing a phone number. For example, you might say, “I give permission for my child’s name and email to be collected and used as described.”
- Use Parental Controls: Even though these are not part of COPPA, parental controls on devices can block apps or websites that might collect data without consent.
- Educate Your Child: Talk with your child about why they should never share personal information online without asking you first. Use simple phrases like, “Always check with me before sharing your name or photos.”
- Monitor Your Child’s Online Activity: Regularly check which apps and sites your child uses and look at their privacy settings together.
- Report Concerns: If you believe a company is not following COPPA, you can report them to the Federal Trade Commission.
By following these steps, parents maintain control over their children’s online information and help children develop safe internet habits.
How Can Parents Explain COPPA and Online Privacy to Their Kids?
Explaining COPPA to children is best done in simple language and with practical examples. Here are ways to help your child understand:
- Tell your child that some websites and games ask for personal information like their name or birthday. Explain this information should only be shared when a trusted grown-up says it’s okay.
- Use clear examples: “If a game asks for your name or where you live, you should always ask me first before you share that.”
- Teach your child to recognize when a site asks for permission and encourage them to tell you immediately if they are asked to share personal details.
- Practice what to say if asked for information, such as: “I need to ask my parent before sharing that.” Role-playing these situations helps your child develop confidence.
This approach builds your child’s understanding of privacy and helps them form good online habits.
What Happens if a Website or App Breaks COPPA Rules?
If a company collects children’s personal information without following COPPA rules, there are legal consequences. The Federal Trade Commission can investigate complaints and require the company to stop the illegal practices. The company may have to delete any collected data and change how it handles children’s information.
For example, if you find out an app your child uses collects names and emails without your permission, you can:
- Contact the company and formally request deletion of your child’s data. Use wording like, “I am a parent of a child who uses your app. I did not provide consent for data collection. Please delete all data related to my child.”
- File a complaint with the FTC online to alert them of the violation.
- Seek assistance from legal aid organizations if you need help understanding your rights or how to file a complaint.
These enforcement options help ensure that children’s privacy is taken seriously and companies follow the law.
Frequently asked questions
What age group does COPPA cover?
COPPA covers children under 13 years old. The law requires parental consent for data collection from children younger than 13. Children 13 and older are generally not covered by COPPA.
How can I tell if a website is COPPA-compliant?
Check the site’s privacy policy for COPPA compliance statements. Legitimate sites will describe how they obtain parental consent and protect children’s data.
Does COPPA apply to social media sites?
Most social media platforms require users to be at least 13 years old to comply with COPPA and avoid collecting data from younger children.
What types of information does COPPA protect?
COPPA protects personal information like your child’s name, address, phone number, email, photos, geolocation, and any data that can identify or contact a child.
What if my child’s data was collected without my permission?
You can contact the company to request deletion of your child’s data, file a complaint with the FTC, and seek legal help if necessary.
Can I revoke consent once I have given it?
Yes, parents have the right to revoke consent at any time and can request that the company stop collecting or delete their child’s information.