COPPA
CIPP/US glossary · Last reviewed: · By Victor Humenhuk (CIPP/US certified)
COPPA - The Children's Online Privacy Protection Act, applying to operators of sites or services directed to children under 13, and to general-audience services with actual knowledge they collect personal information from under-13s.
In the CIPP/US body of knowledge, COPPA comes up under Chapter 10: Education Privacy; Chapter 1: Introduction to Privacy; Chapter 2: U.S. Legal Framework.
COPPA in context
- COPPA codes approved by the FTC) pairs industry codes with government law. (Co-Regulatory, Self-Regulatory, and Technology Models)
- Once approved it has the effect of a court decision; the FTC has used many in privacy cases such as ==COPPA== violations. (Consent Decrees)
- The FTC has general authority over unfair/deceptive practices and specific authority to enforce COPPA. (Key Definitions: Person, Jurisdiction, Authority, Preemption, Private Right of Action)
Where COPPA is covered in the CIPP/US study notes
- Co-Regulatory, Self-Regulatory, and Technology Models
- Consent Decrees
- Opt-In, Opt-Out, and No Option
- Additional FTC Authority: COPPA, HITECH, FCRA, CAN-SPAM
- Opt-In Default for Children's Data
- Edtech under COPPA and Self-Regulation
- The COPPA Final Rule (2025)
Related terms
- Co-regulatory model
- Self-regulatory model
- PCI DSS
- Seal programs
- Consent decree
- Opt-in (affirmative/express consent)
- Opt-out (consumer choice)
- Double opt-in
- No option / commonly accepted practices
- VPPA
Test yourself on COPPA
Recognising a definition is not the same as applying it in an exam scenario. Work through the free CIPP/US practice questions, or read the full CIPP/US study guide - every study note is free.