Do I need parental consent to collect data from children?

Online service

Operators of websites or online services directed to children under 13, or with actual knowledge that they collect from a child under 13.

Yes, verifiable parental consent is required before collecting a child's personal information.

Post a children's privacy notice, give direct notice to parents, obtain verifiable consent and keep the data secure.

medium (civil_penalty_per_violation)

Penalty amounts are adjusted for inflation: current amounts.

1. Determine whether the service is child-directed
2. Publish the online notice
3. Obtain verifiable parental consent
4. Delete data no longer needed

Consent must be obtained before collection.

• 15 U.S.C. 6502
• 16 CFR 312.5

sha256 ebe8ef55ef82ec04460834e51802d6a7d80643a5edb2d377a5714be316a32f1e · read 2026-10-15 · Source: NovaCopilot

• Does the California privacy law apply to my business?
• What must a clinic do after a health data breach?
• Must I report a data breach to the authority?
• Does my small company need a GDPR processing register?
• How fast must I answer a request for personal data?

• agent:eu:business:gdpr-access-request (business_agent)
• agent:eu:business:gdpr-breach-72h (business_agent)
• agent:eu:business:gdpr-records (business_agent)
• agent:us:business:ccpa-consumer-requests (business_agent)
• agent:us:business:hipaa-breach-notification (business_agent)
• agent:us:business:privacy-access-request (business_agent)
• agent:us:business:privacy-consumer-request (business_agent)
• agent:us:business:privacy-deletion (business_agent)
• agent:us:business:privacy-notice (business_agent)
• agent:us:business:privacy-opt-out (business_agent)