FTC COPPA FAQs - What information must I include in my online privacy policy?

Compliance > COPPA
Q:  What information must I include in my online privacy policy?
A:  Section 312.4(d) of the amended Rule identifies the information that must be disclosed in your online privacy policy.  While the original Rule required operators to provide extensive categories of information in their online privacy notices, the amended Rule now takes a shorter, more streamlined approach to cover the information collection and use practices most critical to parents.  Under the amended Rule, the online notice must state the following three categories of information:
  • The name, address, telephone number, and email address of all operators collecting or maintaining personal information through the site or service (or, after listing all such operators, provide the contact information for one that will handle all inquiries from parents);
  • A description of what information the operator collects from children, including whether the operator enables children to make their personal information publicly available, how the operator uses such information, and the operator’s disclosure practices for such information; and
  • That the parent can review or have deleted the child’s personal information and refuse to permit its further collection or use, and state the procedures for doing so. See 16 C.F.R. § 312.4(d) (“notice on the Web site or online service”).
    By streamlining the Rule’s online notice requirements, the Commission hopes to encourage operators to provide clear, concise descriptions of their information practices, which may have the added benefit of being easier to read on smaller screens (e.g., those on smartphones or other Internet-enabled mobile devices). 
This information was obtained from the FTC’s webpage on “Complying with COPPA:  Frequently Asked Questions.”   https://www.ftc.gov/tips-advice/business-center/guidance/complying-coppa-frequently-asked-questions

Add Feedback