Skip to content
Remindash
Start free
RegulationData ProtectionPrivacyConsumer ProtectionInformation SecurityTechnologySaaSInformation TechnologyOnline ServicesDigital AdvertisingGamingEdTechMobile Applications

Children's Online Privacy Protection Rule (COPPA Rule)

16 CFR Part 312
Track obligationsOfficial sources
Authority
Federal Trade Commission (FTC)
Jurisdiction
United States
Document type
Regulation
Obligations
7 · 7 schedulable
Last updated
Oct 31, 2026

Overview

U.S. children’s online privacy rule requiring covered operators to give notice, obtain verifiable parental consent, honor parental controls, minimise data collection, maintain child-data security, and limit retention. Approved safe-harbor program administrators have additional distinct reporting and review duties.

Consolidated federal COPPA research as of 31 October 2026, incorporating the FTC 2025 final amendments and noting its 2026 age-verification enforcement-discretion statement. Source-based duties are separated by action and timing. Fixed-date and recurring duties of approved safe-harbor administrators must not be presented as generally applicable to ordinary operators.

Applicability

Check whether this applies to your organization

Applicability depends on your circumstances. Review official sources and obtain professional advice where appropriate.

Obligations

Scheduled obligations can be tracked with owners and reminders. Event-triggered and continuous duties are kept as reference.

Perform child-data security risk assessments at least annually16 CFR § 312.8(b)(2) · 16 CFR § 312.8(b)(2)Evaluate and modify the security program at least annually16 CFR § 312.8(b)(5) · 16 CFR § 312.8(b)(5)Independently assess each safe-harbor member’s privacy and security at least annually16 CFR § 312.11(b)(2) · 16 CFR § 312.11(b)(2)Submit the annual FTC safe-harbor report by October 2216 CFR § 312.11(d)(1) · 16 CFR § 312.11(d)(1)Post initial certified-operator list by July 21, 202516 CFR § 312.11(d)(4) · 16 CFR § 312.11(d)(4)Submit first triennial safe-harbor technology and assessment report by April 22, 202816 CFR § 312.11(f) · 16 CFR § 312.11(f)Submit initial safe-harbor guideline changes by October 22, 202516 CFR § 312.11(g) · 16 CFR § 312.11(g)

Sources

Always rely on the official text.

  1. 0116 CFR Part 312 — Children’s Online Privacy Protection Rule (eCFR current through 29 October 2026)
    Official document · Office of the Federal Register · Primary source    Official text ↗
Version
COPPA consolidated rule research — 31 October 2026
Published
Oct 31, 2026
Effective from
Apr 21, 2000
Last reviewed
Oct 31, 2026

Current consolidated 16 CFR Part 312 incorporating April 2025 FTC amendments; most new requirements applicable by April 22, 2026; historical safe-harbor deadlines and 2026 enforcement discretion distinguished.

Remindash provides this information to help organizations identify and track potential obligations. Applicability can depend on your organization's circumstances. Review official sources and obtain professional advice where appropriate.

Track the COPPA Rule obligations that apply to you.

Choose the scheduled requirements, assign owners and set reminders. Free to start.

Start tracking obligationsBook a demo