FTC finalizes COPPA Rule amendments (expanded child-directed factors)

On 16 January 2025 the FTC finalized amendments to the COPPA Rule. The FTC FAQ hub later notes the Rule was amended on 22 April 2025 in the Federal Register context (COPPA FAQs).

Material changes (FTC summary)

Covered operators must obtain separate verifiable parental consent before disclosing children’s personal information to third parties for targeted advertising or other non-integral purposes. Retention is limited to as long as reasonably necessary for a specific purpose — indefinite retention is prohibited. Safe Harbor programmes face added transparency duties. Definitions expand (for example biometric and government-issued identifiers). The Commission declined some proposed limits (including certain push-notification and ed-tech school-environment proposals).

Industry compliance calendars commonly cite effectiveness 60 days after Federal Register publication (23 June 2025) and a one-year compliance deadline (22 April 2026). Operators should verify against the Federal Register notice text rather than secondary blogs.

Operator action

This record does not invent new child-directed factor wording beyond the FTC press summary — open the final rule text for exact regulatory language.

Download the change-log card.

Research checked 20 September 2026. Local draft; human editorial review pending.