CIPP/US COPPA rule and children's data guide
COPPA analysis begins with the operator, online service, child-directed or actual-knowledge facts, personal information and parental consent requirement.
Practical example
For a game directed to children, identify the operator, data collected, disclosure purpose and consent mechanism before choosing a COPPA obligation.
Common mistake
Treating every service used by a child as automatically covered without testing the service, operator and knowledge facts.
The FTC maintains the COPPA Rule and related guidance. Current rule text and implementation material should be checked when facts turn on a specific collection or disclosure practice.
For CIPP/US study, move from scope to notice and consent. Then consider whether a retention, security or enforcement issue is separately presented.
How this supports CIPP/US study
Use this lesson to separate sectoral scope, data type and regulated entity before testing an exception. Continue with the CIPP/US practice exam.
Sources and study method
This independent lesson uses active recall, spaced retrieval and scenario practice. Read the full study method.