Receive direct notice
A covered operator must provide parents with direct notice of its collection, use, and disclosure practices before obtaining consent.
Rights and protections
COPPA gives parents continuing control over covered information collected online from their children under 13.
Protections under the law
Give or withhold consent
Subject to limited exceptions, the operator must obtain verifiable parental consent before collecting, using, or disclosing a child’s personal information.
Review and delete information
Parents can request access to covered personal information collected from their child and direct the operator to delete it.
Stop further collection
Parents can refuse further use or future online collection of the child’s personal information.
Preserve relevant information. If you may need to report unlawful conduct or pursue a claim, keep URLs, account names, dates, correspondence, original files, and confirmation numbers. Do not redistribute illegal or exploitative material in order to document it.