Understanding Information Collection Under COPPA: Protecting Your Child's Online Privacy

The Children's Online Privacy Protection Act (COPPA) puts strict regulations on how websites and online services collect information from children under 13. This is because children may not fully understand the risks of sharing their personal information online, and COPPA aims to empower parents to control their child's data.

What type of information does COPPA cover?

COPPA defines "personal information" broadly, encompassing any data that can be used to identify a specific child. This includes, but is not limited to:

• Names: First and last names, nicknames, or initials.
• Contact information: Home address, phone number, email address.
• Identifiers: Social Security number, student ID number, IP address.
• Commercial information: Purchase history, interests, favorite products.
• Geolocation data: Physical location or online activity tracking.
• Audio and visual data: Photos, videos, voice recordings.

How can websites collect information from children?

Websites must **obtain verifiable parental consent** before collecting any personal information from children under 13. This means they need a clear and verifiable way to confirm that the parent or guardian is aware and agrees to the data collection.

What are the limitations on information collection under COPPA?

• Data minimization: Websites can only collect the minimum amount of information necessary for their intended purpose.
• Limited disclosure: Personal information collected from children cannot be shared with third parties without parental consent, except in certain limited circumstances.
• Security: Websites must implement reasonable security measures to protect children's personal information from unauthorized access, use, or disclosure.
• Transparency: Websites must provide clear and concise notice to parents about their data collection practices, how the information will be used, and their rights to access, review, and delete their child's information.

What rights do parents have under COPPA?

• Access their child's personal information: Websites must provide a mechanism for parents to request and review the information they have collected from their child.
• Correct inaccurate information: Parents can request that websites correct any inaccurate or outdated information about their child.
• Delete their child's information: Parents can request that websites delete their child's personal information from their databases.
• Revoke consent: Parents can revoke their consent for data collection at any time.

What can you do to protect your child's privacy online?

• Be aware of COPPA: Understand the law and your rights as a parent.
• Talk to your child about online safety: Teach your child about responsible online behavior and the risks of sharing personal information.
• Review websites' privacy policies: Before your child uses a website, read the privacy policy to understand how they collect and use information.
• Set parental controls: Use parental controls on your child's devices to limit their access to certain websites and apps.