Federal Trade Commission (FTC) Publishes Updates to Children’s Online Privacy Protection Act (COPPA) Rule

The FTC finalized amendments (Final Rule) to the COPPA Rule relating to the collection, use, and disclosure of personal information about children under the age of 13. The updates took effect on June 23, 2025, and created stronger protections for children’s personal information, including by (1) expanding the definition of “personal information,” (2) requiring separate parental consent for third-party disclosures, (3) creating new obligations for the “support for internal operations” exemption, and (4) implementing more prescriptive security requirements, including data retention limits. Although companies subject to the updates do not need to fully comply until April 2026, businesses should begin evaluating the sufficiency of their current data collection, disclosure, and security practices to ensure compliance with the Final Rule’s robust requirements.