Submit first triennial safe-harbor technology and assessment report by April 22, 2028
Under Children's Online Privacy Protection Rule (COPPA Rule)
Approved safe-harbor programs must first report technological capabilities and mechanisms for assessing member fitness by April 22, 2028; the recurring three-year follow-ups are separately represented for timing review. Imported research notes (check before approving): • Duty holder: other (FTC-approved COPPA safe harbor program administrator) • Timing in the source: "No later than April 22, 2028"
When it’s due
22 April 2028
When you track it, you set the due date that applies to you. Remindash schedules reminders before it.
From the source
Open source document ↗“No later than April 22, 2028, and every three years thereafter”16 CFR § 312.11(f), 16 CFR § 312.11(f) · COPPA Rule
Key information
- Obligation type
- Reporting
- Frequency
- One-time
- Applies to
- FTC-approved COPPA safe harbor program administrator; consult section-specific exceptions, parental consent exceptions and the 2026 FTC age-verification enforcement policy. Logic to review: Only FTC-approved safe harbor administrators are subject to the safe harbor program duties; ordinary operators do not owe these filings.
- Suggested owner
- Safe Harbor Programme Director
- Source
- 16 CFR § 312.11(f), 16 CFR § 312.11(f)
- Policy last reviewed
- Oct 31, 2026
Check that it applies to you. This requirement was identified from the source document. Whether it applies depends on your organization’s circumstances — review the official source and get professional advice where appropriate.