The first updates to the COPPA Rule since 2013 impose new obligations for sharing children’s personal information with third parties.
Key Points:
- The updates will take effect on June 23, 2025, and create stronger protections for children’s personal information, including by (i) expanding the definition of “personal information,” (ii) requiring separate parental consent for third-party disclosures, (iii) creating new obligations for the “support for internal operations” exemption, and (iv) implementing more prescriptive security requirements.
- The FTC accepted most proposed amendments outlined in its Notice of Proposed Rulemaking, but opted not to adopt amendments related to education technology and push notifications.
