United States. Children's privacy. Regulation
Amended COPPA RuleChildren's Online Privacy Protection Rule, 16 C.F.R. Part 312 (2025 amendments)
§1Summary
- Synopsis
Updates the COPPA Rule to require separate verifiable parental consent before disclosing children's data to third parties such as advertisers, written information security programs, and a written data retention policy. It also expands the definition of personal information to include biometric identifiers and adds transparency for safe harbor programs.
- Key themes
- Unique features
Bans indefinite retention of children's data and requires published retention policies; separate consent for targeted advertising disclosures.
- SaaS relevance
SaaS vendors serving child-directed apps need a written security program and must support customers' separate consent and deletion workflows.
§2Obligations
- Extraterritorial
- Yes
- Breach notification
- None
- DPO
- No
- Cross-border transfers
- None
- Maximum penalty
- $53,088 per violation
§3Dates
- Key dates
- Adopted
- In force
- Final rule published in Federal Register 2025-04-22; effective 2025-06-23; general compliance date 2026-04-22 (safe harbor programs had some later deadlines).
§4Text and authority
- Text
- Authoritative text ecfr.gov
- Authority
- Federal Trade Commission (FTC)
§5Where it applies
- Domestic law of
- United States
- Also applies in
- Alabama
- Alaska
- Arizona
- Arkansas
- California
- Colorado
- Connecticut
- Delaware
- District of Columbia
- Florida
- Georgia
- Guam
- Hawaii
- Idaho
- Illinois
- Indiana
- Iowa
- Kansas
- Kentucky
- Louisiana
- Maine
- Maryland
- Massachusetts
- Michigan
- Minnesota
- Mississippi
- Missouri
- Montana
- Nebraska
- Nevada
- New Hampshire
- New Jersey
- New Mexico
- New York
- North Carolina
- North Dakota
- Ohio
- Oklahoma
- Oregon
- Pennsylvania
- Puerto Rico
- Rhode Island
- South Carolina
- South Dakota
- Tennessee
- Texas
- US Virgin Islands
- Utah
- Vermont
- Virginia
- Washington
- West Virginia
- Wisconsin
- Wyoming
§6Sources and verification
- Sources consulted
- Verification
High confidence.
date_adopted is the FTC vote date (January 2025); publication was 2025-04-22.