Federal Trade Commission Amends Children's Online Privacy Protection Act (COPPA) Rules
The Federal Trade Commission (FTC) has finalized significant amendments to the Children's Online Privacy Protection Act (COPPA) Rule, marking the first substantive revision since 2013. These amendments, which took effect on June 23, 2025, with full compliance required by April 22, 2026, introduce four key changes directly impacting media buying and data collection from children under 13. Operators must now obtain separate parental consent for disclosing children's data to third parties, including advertisers, unless such disclosure is integral to the service. Biometric identifiers, such as voiceprints and facial templates, have been added to the definition of personal information. Indefinite retention of children's data is now unlawful, requiring a written retention policy. Additionally, operators relying on the 'internal operations' exception must disclose the specific operations involved and the measures taken to prevent behavioral use of identifiers. These changes aim to strengthen privacy protections f...