COPPA Rule
Amended United States (Federal) · In force Apr 21, 2000 · no upcoming deadlines
Deadlines
| Date | What happens | When |
|---|---|---|
| Jun 23, 2025 | Amended COPPA Rule takes effect15 months ago | 15 months ago |
| Apr 22, 2026 | Full compliance with amended COPPA Rule5 months ago | 5 months ago |
Summaries for reference, not legal advice. Check the official text.
What it does
Requires operators of child-directed online services, or those with actual knowledge they collect personal information from children under 13, to give notice and obtain verifiable parental consent before collecting, using or disclosing that data. The 2025 amendments add separate parental consent for disclosures to third parties (including for targeted advertising), require a written data retention policy and a written information security program, expand 'personal information' to include biometric identifiers and government-issued identifiers, and tighten Safe Harbor program oversight.
- Who it applies to
- Operators of commercial websites, online services and apps directed to children under 13 (including mixed-audience services), and general-audience operators with actual knowledge they collect personal information from a child under 13. No revenue or volume threshold.
- Penalties
- Violations are treated as violations of an FTC trade regulation rule: civil penalties up to $53,088 per violation (FTC Act 5(m)(1)(A) amount as adjusted January 2025, 90 FR 5580; adjusted annually for inflation). State attorneys general may also sue.
- Enforced by
- Federal Trade Commission; State Attorneys General
- Official name
- Children's Online Privacy Protection Rule (16 CFR Part 312), as amended April 2025
- Citation
- 15 U.S.C. 6501-6506; 16 CFR Part 312; amendments at 90 FR 16918 (Apr. 22, 2025)
- Topics
- privacy, children
Research notes
Safe Harbor program obligations had earlier compliance dates set relative to publication: 90 days after publication for 312.11(d)(4) and six months after publication for 312.11(d)(1) and (g) (i.e. around July 21, 2025 and October 22, 2025); omitted as rows because the rule states them relatively. The FTC civil penalty figure is the January 2025 adjustment; no 2026 FTC adjustment was found in the Federal Register as of verification.
Related
CIRCIAQuestions about COPPA Rule
- What are the COPPA Rule compliance deadlines?
- Jun 23, 2025: Amended COPPA Rule takes effect. Apr 22, 2026: Full compliance with amended COPPA Rule.
- When does COPPA Rule take effect?
- COPPA Rule took effect on Apr 21, 2000.
- Who does COPPA Rule apply to?
- Operators of commercial websites, online services and apps directed to children under 13 (including mixed-audience services), and general-audience operators with actual knowledge they collect personal information from a child under 13. No revenue or volume threshold.
- What are the penalties under COPPA Rule?
- Violations are treated as violations of an FTC trade regulation rule: civil penalties up to $53,088 per violation (FTC Act 5(m)(1)(A) amount as adjusted January 2025, 90 FR 5580; adjusted annually for inflation). State attorneys general may also sue.