Law note · United States
Children's Online Privacy Protection Rule (COPPA), including 2025 biometric identifier amendments
Requires operators of websites and online services directed to children under 13, or that have actual knowledge they are collecting personal information from such children, to give notice and obtain verifiable parental consent before collecting, using, or disclosing a child's personal information, and to give parents a means to review and delete it.
The FTC's 2025 amendments, effective June 23, 2025, add biometric identifiers, including voiceprints and facial templates, to the covered definition of personal information.
What it asks of an app
- Obtain verifiable parental consent before collecting, using, or disclosing a child's personal information, including biometric identifiers such as voiceprints or facial templates.
- Give parents a way to review and delete a child's collected personal information.
When LexLint raises it
Declared activities: crawls_web, trains_models, deploys_chatbot, automated_outreach, processes_voice, processes_biometrics
Primary source: eCFR, current regulatory text, 16 CFR Part 312, and the Federal Register final rule for the 2025 amendments