COPPA + 2025 Rule (childrens data)
Children's Online Privacy Protection Act and 2025 Amended COPPA Rule
United States · 15 U.S.C. §§ 6501–6506; 16 C.F.R. Part 312
- Status
- In effect
- Took effect
- June 23, 2025
- Applies to
- Operators of child-directed websites/online services (including AI-powered services) and operators with actual knowledge they collect children's data
- Enforced by
- Federal Trade Commission; state attorneys general
COPPA requires online services aimed at children under 13 to get verifiable parental consent before collecting kids' personal data. The 2025 rule update — fully in effect since April 22, 2026 — adds biometric identifiers (like face templates and voiceprints, which matter for AI tools), requires separate parental consent before sharing children's data for targeted advertising, and tightens data retention limits.
Who is protected: Children under 13 and their parents
Legal detail
15 U.S.C. §§ 6501–6506 and the amended COPPA Rule (16 C.F.R. Part 312, effective June 23, 2025, full compliance Apr. 22, 2026) require verifiable parental consent, expand 'personal information' to include biometric identifiers, mandate separate consent for third-party disclosures for targeted advertising, and impose data retention and security requirements.
Key facts
| Jurisdiction | United States |
|---|---|
| Level | Federal |
| Strength | Stronger |
| Enacted | October 21, 1998 |
| Citation | 15 U.S.C. §§ 6501–6506; 16 C.F.R. Part 312 |
| Private right of action | No, agency enforcement only |
| Penalties | Civil penalties (currently $53,088 per violation) |
| Topics | children's online safety · consumer data privacy · biometric data · data retention · consumer protection · AI disclosure and transparency |
| Agency page | Children's Online Privacy Protection Rule (Final Rule Amendments), Federal Register |
More AI rules in United States
- Trump AI Innovation & Security EO (June 2026) · In effect
- FERC order directing PJM and other grid operators to reform tariffs on… · Enacted (not yet in effect)
- Chatrie v. United States (Fourth Amendment protection for location… · Blocked / in litigation
- Kids Internet and Digital Safety Act (KIDS Act) (H.R. 7757) · Proposed / pending
- NAIC AI Evaluation Tool Pilot (12 states, 2026) · Proposed / pending
- FTC Proposed Policy Statement — AI Accuracy (July 2026) · Proposed / pending
Related children's online safety rules elsewhere
- PA v. Character.AI (Fake Psychiatrist Chatbot) · Blocked / in litigation
- RI AI Companion Self-Harm Safety (2026) · Enacted (not yet in effect)
- Oregon SB 1546 (AI companion chatbot disclosure + private right of action) · Enacted (not yet in effect)
- Blanchester OH schools AI policy EDEC (Jun. 29, 2026) · In effect
- Portland Public Schools genAI pause (Jun. 23, 2026) · In effect
- SC H 3431 Age-Appropriate Design Code Act (2026) · In effect
See something wrong or out of date? Submit a correction. Every entry must carry a verifiable source.