The Federal Trade Commission (FTC) has finalized amendments to the Children's Online Privacy Protection Rule (COPPA Rule), strengthening protections for children’s personal information online. After publication in the Federal Register, the updated rule introduces new requirements for how websites and online services collect, use, and disclose data from children under 13. Significant changes include a mandate for operators to obtain separate, verifiable parental consent before sharing children’s data with third parties for targeted advertising or other purposes. The rule also imposes strict limits on data retention, requiring information to be kept only as long as necessary to fulfill its original purpose.
The amendments aim to increase accountability and transparency by enhancing the obligations of FTC-approved Safe Harbor programs, which must now publicly disclose their membership and report additional compliance information. The FTC has given entities subject to the rule a year to meet compliance with these updates. FTC Chair Lina M. Khan emphasized that these changes empower parents and prevent platforms from monetizing children’s data without explicit consent. The rule changes are part of the FTC’s broader effort to adapt to changing data practices and safeguard the privacy of young users in an increasingly connected digital environment.
