COPPA
COPPA Children’s Privacy Checklist for Online Services
A COPPA checklist for notice, verifiable parental consent, data minimization, and operator duties.
- Estimated time
- 4–10 Weeks
- Audience
- Product Teams with Child-Directed or Mixed-Audience Apps
- Last updated
Operational reference for COPPA readiness. FTC enforcement and COPPA Rule amendments require counsel for child-directed determinations.
Progress is saved in this browser only. Nothing is sent to a server.
Phase 1: Applicability
Phase 2: Notice & Consent
Phase 3: Vendors & Ads
Phase 4: Operate
FAQ
Is COPPA only US?+–
It is US federal law for operators collecting from children under 13. Other countries have age-specific rules too.
What is verifiable parental consent?+–
A method reasonably calculated to ensure the person providing consent is the parent—email plus more for certain disclosures.
Does GDPR-K still apply in the EU?+–
Child-consent rules under GDPR are separate. You may need both.
Who enforces COPPA?+–
The FTC and some state AGs.
Related field notes
The checklists and field notes provided on this website are for educational and informational purposes only. They do not constitute legal, financial, or professional advice. Completing a checklist does not guarantee compliance, certification, or immunity from audits. Always consult with a certified auditor or legal counsel for your specific organizational needs. Full disclaimer