It's a living legal community making laws accessible and interactive. Click Here to get Started »
Children's Online Privacy Protection Act (COPPA)
COPPA is a U.S. federal law that prohibits a Web site operator from collecting information from children under the age of 13 without parent permission.
The Children's Online Privacy Protection Act (COPPA) is a federal law that prohibits a Web site operator from knowingly collecting information from children under the age of 13 unless the operator obtains parental consent and allows parents to review their children's information and restrict its further use.
The primary goal of COPPA is to place parents in control over what information is collected, used and disclosed from their young children online.
COPPA applies to operators of commercial websites and online services directed to children under 13 that collect, use, or disclose personal information from children, and operators of general audience websites or online services with actual knowledge that they are collecting, using, or disclosing personal information from children under 13. Those operators that fall under COPPA must:
- Provide direct notice to parents and obtain verifiable parental consent, with limited exceptions, before collecting personal information from children;
- Give parents the choice of consenting to the operator’s collection and internal use of a child’s information, but prohibiting the operator from disclosing that information to third parties;
- Provide parents access to their child’s personal information to review and/or have the information deleted;
- Give parents the opportunity to prevent further use or online collection of a child’s personal information;
- Maintain the confidentiality, security, and integrity of information they collect from children.
Violators of COPPA are liable for civil penalties of up to $11,000 per violation.
FTC Fair Information Practices
The FTC Fair Information Practices (FIP) is a set of principles to assure that the collection of personal information is practiced in a fair manner and provide adequate privacy protections. These principles do not address personal information collected from children, but FIPs are applicable to parents, with regard to COPPA. The application of FIP principles to information collected from children is broken down into two sections:
- Parental Notice/Awareness and Parental Choice/Consent
- Access/Participation and Integrity/Security
US v. Looksmart, Ltd.
US v. Monarch Services, Inc., et al.
US v. Bigmailbox.Com, Inc., et al.
United States of America v. Lisa Frank, Inc.
A $30,000 fine in civil penalties for Lisa Frank, Inc. was ordered by the FTC for the violation of the COPPA Rule and the FTC Act.
United States v. American Pop Corn Company
The FTC ordered American Pop Corn Company to pay $10,000 for violation of the COPPA Rule.
United States of America (for the FTC) v. Hershey Foods Corporation
Hershey Food Corporation will pay civil penalties of $85,000 for violation of the COPPA Rule.
United States of America (for the FTC) v. Mrs. Fields Famous Brands, Inc., Mrs. Fields' Holding Company, Inc., and Mrs. Fields' Original Cookies, Inc.
Mrs. Fields Cookies will pay $100,000 in civil penalties for violation of the COPPA Rule.
United States of America (for the FTC), Plaintiff, v. Xanga.com, Inc., a corporation, John Hiler, individually and as an officer of the corporation, and Marc Ginsburg, individually and as an officer of the corporation, Defendants
A civil penalty of $1 million will be paid by social networking website operators Xanga.com, Inc. and its principals, Marc Ginsburg and John Hiler, for violation of COPPA.
United States (for the FTC), Plaintiff, v. Iconix Brand Group, Inc., Defendant
A $250,000 civil penalty will be paid by Iconix Brand Group, Inc. for violation of COPPA.
United States of America (for the FTC), Plaintiff, v. Sony BMG Music Entertainment, a general partnership subsidiary of Sony Corporation of America, Defendant
Sony BMG Music Entertainment agreed to pay $1 million for violating COPPA.
United States of America (for the FTC), Plaintiff, v. Industrious Kid, Inc., a corporation and Jeanette Symons, individually and as an officer of the corporation, Defendants
FTC v. Toysmart.com, LLC, and Toysmart.com, Inc.
- First Amendment Complaint
- Consent Decree and Order for Civil Penalties, Injunctive and Other Relief
The Federal Trade Commission (FTC) has proposed new revisions to COPPA. The revisions are focused on current technology and uses of information. Areas being address are the rise of geo-location technology (e.g. Global Positioning System (GPS) on mobile phones) and behavior-based Web advertisement techniques (e.g. Google). A major focus is determining whether the technologies used today create new privacy concerns as children browse the Internet on computers and mobile devices. The mobile web is the most significant factor in the review. Currently, the COPPA's definition of "Internet" does not include mobile communication. Changing this definition could significantly change how children utilize smartphone devices.
- ↑ http://www.ftc.gov/privacy/coppafaqs.shtm
- ↑ http://www.ftc.gov/reports/privacy3/fairinfo.shtm
- ↑ http://www.ftc.gov/opa/2001/04/girlslife.shtm
- ↑ http://www.ftc.gov/opa/2001/10/lisafrank.shtm
- ↑ http://www.ftc.gov/opa/2002/02/popcorn.shtm
- ↑ http://www.ftc.gov/opa/2003/02/hersheyfield.shtm
- ↑ http://www.ftc.gov/opa/2006/09/xanga.shtm
- ↑ http://www.ftc.gov/opa/2009/10/iconix.shtm
- ↑ http://www.ftc.gov/opa/2008/12/sonymusic.shtm
- ↑ http://www.ftc.gov/opa/2000/07/toysmart2.shtm
- ↑ http://www.ftc.gov/os/2010/03/100324coppa.pdf
- ↑ http://www.ftc.gov/opa/2010/03/coppa.shtm
- Children's Online Privacy Protection Act
- Togetherville: A social network for kids
- How to comply with Children's Online Privacy Protection Act
- Frequently Asked Questions about the Children's Online Privacy Protection Rule
- FTC Privacy Initiatives: The Children's Online Privacy Protection Act
Related Resources on FindLaw
Related Blogs on FindLaw
Web Services by Yahoo!