FTC COPPA Rule Amendments (2025)

FTC COPPA Rule Amendments (2025) in United States: active, effective April 22, 2026. Applies to Operators of websites and online services directed to children or with actual knowledge of collecting data from children under 13. Age range: Under 13. Expanded definition of personal information includes

Key facts

Key requirements

• Expanded definition of personal information includes biometric identifiers (fingerprints, facial templates, voiceprints, iris patterns, gait patterns)
• Government-issued identifiers (state ID numbers, birth certificate numbers, passport numbers) now classified as personal information
• Data retention limits: cannot retain children's personal information longer than necessary for specific documented purposes
• Collecting children's data for AI training requires separate verifiable parental consent
• Penalties up to $53,088 per violation

Notes

First update to COPPA Rule since 2013. Final rule published April 22, 2025; compliance deadline April 22, 2026 has passed and the FTC has signaled COPPA as a top 2026 enforcement priority (recent actions: Disney $10M, Apitor, LAI Systems, Retro Dreamer). February 25, 2026 FTC policy statement limits COPPA enforcement where children's data is collected solely for age verification. Separate COPPA 2.0 legislation is tracked below.

Further reading: COPPA Compliance Guide

Frequently asked

What does FTC COPPA Rule Amendments (2025) require?

Expanded definition of personal information includes biometric identifiers (fingerprints, facial templates, voiceprints, iris patterns, gait patterns) Government-issued identifiers (state ID numbers, birth certificate numbers, passport numbers) now classified as personal information Data retention limits: cannot retain children's personal information longer than necessary for specific documented purposes Collecting children's data for AI training requires separate verifiable parental consent Penalties up to $53,088 per violation

Who must comply with FTC COPPA Rule Amendments (2025) in United States?

Operators of websites and online services directed to children or with actual knowledge of collecting data from children under 13

When does FTC COPPA Rule Amendments (2025) take effect and what is its status?

Effective April 22, 2026. Current status: active. First update to COPPA Rule since 2013. Final rule published April 22, 2025; compliance deadline April 22, 2026 has passed and the FTC has signaled COPPA as a top 2026 enforcement priority (recent actions: Disney $10M, Apitor, LAI Systems, Retro Dreamer). February 25, 2026 FTC policy statement limits COPPA enforcement where children's data is collected solely for age verification. Separate COPPA 2.0 legislation is tracked below.

Related laws