Congress has passed an update to the Children's Online Privacy Protection Act raising the age of protection from 13 to 17, significantly expanding privacy safeguards for teenaged internet users. The law takes effect in January 2027 and affects virtually every major online platform.
Under the updated COPPA, platforms must obtain verifiable parental consent before collecting personal data from users under 17, implement age verification mechanisms, and provide parents with tools to manage their children's data and online experiences.
The legislation also bans targeted advertising to users under 17, prohibits the sale of minors' data, and requires platforms to default to the highest privacy settings for young users. Violations carry fines of up to $50,000 per incident.
Technology companies face significant compliance challenges. Age verification is technically difficult without collecting additional personal information, creating a privacy paradox that the law acknowledges but doesn't fully resolve. The FTC is tasked with developing approved verification methods.
The bill passed with overwhelming bipartisan support, reflecting rare congressional unity on children's online safety issues. Parent advocacy groups celebrated the passage while noting that enforcement will be the true test of the law's effectiveness.
