Children's Online Privacy Protection Rule (COPPA)

Operators of commercial websites and online services directed to children under 13, or that knowingly collect personal information from children under 13, must provide notice of their information practices, obtain verifiable parental consent before collecting personal information, give parents the choice to consent to collection without consenting to disclosure to third parties, and provide parents access to their child's information.

Operators must also maintain the confidentiality, security, and integrity of the information collected and may retain information only as long as reasonably necessary to fulfill the purpose for which it was collected.