Are directed to children under 13 and collect their personal information.
Have actual knowledge that they are collecting personal information from children under 13.
Among other things, COPPA requires commercial website operators and online services to:
Obtain verifiable consent from the children's parents before collecting, using, or disclosing children's information (subject to certain limited exceptions).
Provide notice of their collection, use, and disclosure practices relating to this information. The notice must meet certain specified requirements.
Collect only personal information reasonably necessary for a child to participate in an activity.
Create and maintain reasonable security measures to protect this information.