FTC Finalizes Updated COPPA Rules

Businesses that collect children's online information will now be subject to new, stricter rules under the federal Children's Online Privacy Protection Act (COPPA or the Act), following the Federal Trade Commission (FTC)'s adoption of final rule changes to COPPA on January 16, 2025.

Effective in 2000 and last revised in 2013, COPPA regulates how businesses that operate websites and online services "directed to children" under 13 can collect and use their personal information. Importantly, COPPA requires that regulated businesses provide direct and online notice to parents and obtain verifiable parental consent before collecting, using, or disclosing the personal information of children under 13 years of age. COPPA also imposes additional limits on the business practices of these companies and gives parents a greater ability to control what personal information about their children is made available to businesses and how it is used.