ARTICLE
8 May 2025

FTC (Finally) Publishes Amended COPPA Rule: Compliance Deadlines Set

PC
Perkins Coie LLP

Contributor

Perkins Coie is a premier international law firm with over a century of experience, dedicated to addressing the legal and business challenges of tomorrow. Renowned for its deep industry knowledge and client-centric approach, the firm has consistently partnered with trailblazing organizations, from aviation pioneers to artificial intelligence innovators. With 21 offices across the United States, Asia, and Europe, and a global network of partner firms, Perkins Coie provides seamless support to clients wherever they operate.

The firm's vision is to be the trusted advisor to the world’s most innovative companies, delivering strategic, high-value solutions critical to their success. Guided by a one-firm culture, Perkins Coie emphasizes excellence, collaboration, inclusion, innovation, and creativity. The firm is committed to building diverse teams, promoting equal access to justice, and upholding the rule of law, reflecting its core values and enduring dedication to clients, communities, and colleagues.

On April 22, 2025, the Federal Trade Commission published in the Federal Register the amendments to the Children's Online Privacy Protection Act (COPPA) rule it announced on January 16, 2025.
United States Privacy

On April 22, 2025, the Federal Trade Commission published in the Federal Register the amendments to the Children's Online Privacy Protection Act (COPPA) rule it announced on January 16, 2025.

The amendments become effective on June 21, 2025. Website and online operators have until April 22, 2026 to comply with the amendments whereas "safe harbor" programs have until October 22, 2025 to comply with provisions applicable to them.

As reported in our prior post, the amendments impose a variety of new requirements on operators of websites and online services that collect personal information from children under 13, such as: (1) separate requirements to obtain consent for disclosures of personal information that are not integral to the website or online service; (2) a requirement to disclose the specific purposes for which an operator is relying on the "support for internal operations" exception to the rule's parental consent requirement; and (3) a requirement to publish a data retention schedule for children's data in the operator's privacy policy.

The amendments were adopted with unanimous support in the waning days of the Biden administration in spite of objections raised by then-Commissioner (now Chairman) Andrew Ferguson to several provisions. Publication in the Federal Register was delayed by an executive order issued by President Trump on January 20, 2025 that directed agency heads to review and reconsider unpublished pending rules. Notwithstanding the concerns raised by then-Commissioner Ferguson, the rule was published on April 22.

The rule's adoption and ultimate publication reflects the strong support for children's privacy at the FTC under both the Biden and Trump administrations. That support is shared at the state level, where attorneys general can not only enforce COPPA and state unfair and deceptive acts and practices laws to protect the privacy of children under 13, but also authority under rapidly proliferating statutes designed to address the privacy and safety of individuals under 18.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

Mondaq uses cookies on this website. By using our website you agree to our use of cookies as set out in our Privacy Policy.

Learn More