COPPA Compliance & Online Research: A Parent's Guide
Understand COPPA protections when your child participates in online surveys and market research. Know your parental rights and what to ask before consent.
The Children's Online Privacy Protection Act (COPPA) is a U.S. federal law enforced by the Federal Trade Commission (FTC) to safeguard the privacy of children under 13. If your child participates in online surveys, market research, or other data collection activities, understanding COPPA is essential. Here's what parents need to know.
What COPPA Protects
COPPA requires operators of commercial websites and online services directed to children under 13 or knowingly collecting personal information from children under 13 to notify parents of their information practices, obtain verifiable parental consent for the collection, use, or disclosure of children's personal information, let parents prevent further maintenance or use or future collection of their child's personal information, provide parents access to their child's personal information, not require a child to provide more personal information than is reasonably necessary to participate in an activity, and maintain reasonable procedures to protect the confidentiality, security, and integrity of the personal information.
COPPA only applies to personal information collected online from children, including personal information about themselves, their parents, friends, or other persons. This includes names, email addresses, phone numbers, photos, videos, geolocation data, and persistent identifiers like cookies.
Parental Consent Requirements
Researchers must obtain explicit consent from parents or guardians before collecting any personal information. On January 16, 2025, the Federal Trade Commission (FTC) finalized amendments to the Children's Online Privacy Protection Act (COPPA) Rule relating to the collection, use and disclosure of personal information about children under the age of 13. The Final Rule, which comes into effect 60 days after publication in the Federal Register, adds new requirements for online notices, certain third-party disclosures, parental consent, data retention and Safe Harbor programs.
A clear and comprehensive privacy policy must outline how children's data will be collected, used, and protected. Parents should always review these policies before allowing their child to participate.
What Parents Can Do
Only the information necessary for the study should be collected, and robust safeguards must be implemented to protect sensitive data from breaches or misuse. Parents have the right to: