Child
An individual under 13 years of age.
About The Children’s Online Privacy Protection Act
Legislative history, scope, definitions, and the relationship between this measure and existing federal law.
Purpose and legal framework
COPPA is implemented through the FTC’s Children’s Online Privacy Protection Rule, 16 C.F.R. Part 312. The Rule defines covered operators, personal information, collection, parental consent, notice, security, retention, and safe-harbor programs.
The law does not impose the same rules on every website used by a child. Coverage depends on child-directed status, actual knowledge, collection practices, and the detailed Rule definitions.
Current status
StatusFederal law
Enacted October 21, 1998 · FTC Rule amended April 22, 2025
Key definitions
Personal information
Covered identifiers and data including names, contact information, persistent identifiers, precise geolocation, photos, audio or video containing a child’s image or voice, and specified biometric and combined information.
Operator
A person operating a covered website or online service and collecting or maintaining personal information from or about users, as defined by the Rule.
Legislative history
- October 21, 1998COPPA is enacted as part of Public Law 105-277.
- April 21, 2000The original COPPA Rule takes effect.
- July 1, 2013Major amendments addressing newer technology take effect.
- April 22, 2025The FTC publishes additional final Rule amendments.