Earlier this week, the US Federal Trade Commission (FTC) settled a complaint against the operator of an online talent search company, asserting that the talent search company’s collection and disclosure of children’s personal information violated the Children’s Online Privacy Protection Act (COPPA) by failing to obtain parental consent, failing to provide adequate notices, and failing to implement the appropriate restrictions in compliance with COPPA. Under the terms of the settlement, the company agreed to pay $235,000.
Managing COPPA Compliance
- Providing direct notice to parents and obtaining verifiable parental consent before collecting personal information from children, with limited exceptions
- Providing parents access to their children’s personal information, as well as the right to request deletion and/or opt out of further collection or use of such information
- Limiting the disclosure of children’s information, and taking reasonable steps to release such information only to third parties capable of maintaining its confidentiality and security
- Retaining children’s personal information only as long as necessary to fulfill the purpose for which it was collected