Partner Michael P. Canty and Associate Danielle Izzo have authored a timely article, "Implications of Kid Privacy Rule Revamp for Parents, Cos.", published by Law360.

On January 16, 2025, the Federal Trade Commission took significant steps to strengthen protections for children’s online data by amending the Children’s Online Privacy Protection Act (COPPA)—the only federal law governing the collection of children's data online.  These changes grant parents greater control over their children’s information and impose new compliance obligations on companies that offer online services to minors.

With many parents wondering how these updates will enhance their ability to safeguard their children’s privacy, Michael and Danielle examine the key revisions to COPPA, their benefits for families, and the implications for technology companies.

Notably, the amendments:

1. Clarify parental consent protocols to ensure stronger oversight,
2. Expand the definition of protected data to include mobile phone numbers and biometric identifiers,
3. Require companies to conduct annual risk assessments,
4. Limit the retention period for children’s personal data, and
5. Mandate specific security measures to better protect children’s information.

These revisions require tech companies offering web services to children under 13 to reassess and, if necessary, update their privacy practices to remain compliant.