
The Children’s Online Privacy Protection Act (COPPA) is a federal law designed to protect the personal information of children under the age of 13 in the digital environment. COPPA regulates how websites and streaming platforms collect and share data belonging to young users.
COPPA gives parents control over their children’s online privacy as children often lack the ability to understand how their personal information is collected or monetized. COPPA therefore places legal responsibility on companies to obtain verifiable parental consent before collecting or using a child’s personal data.
COPPA was passed at a time when the internet was becoming widely accessible to children and lawmakers identified a growing risk that children’s data was being gathered without parental knowledge.
Technology has evolved dramatically since COPPA was enacted, but its underlying purpose remains the same when it comes to children’s digital privacy.
COPPA applies to any online service that is directed to children under 13 or that knowingly collects personal information from children under 13. This includes websites and apps that are specifically designed for children, as well as general audience platforms that become aware they are collecting children’s data.
Companies subject to COPPA must provide clear privacy notices and allow parents to review and delete their child’s information. Data may only be retained for as long as it serves a legitimate purpose, after which it must be securely deleted.
One of the most notable recent COPPA cases involved The Walt Disney Company when federal regulators alleged that Disney failed to properly classify certain online video content as being directed to children. Because the content was not correctly designated, personal data from children under 13 was collected and used for advertising purposes without proper parental consent.
In late 2025, Disney agreed to a settlement that included a civil penalty of approximately $10 million and a court-ordered injunction requiring improved COPPA compliance practices. The case sent a clear message that mislabeling content or relying on platform defaults does not excuse companies from their legal responsibilities under COPPA.
The Disney settlement also underscored a growing regulatory focus on how children’s data is collected through video streaming and advertising technology.
In addition to Disney, regulators have pursued enforcement actions against app developers and gaming platforms. Recent cases have involved allegations of collecting geolocation data from children and using persistent identifiers to track children across digital environments.
Several companies have faced multimillion-dollar penalties and long-term monitoring requirements. These cases illustrate that COPPA violations can arise from everyday product design decisions, not just intentional misconduct.
For parents, COPPA provides critical transparency and control. The law allows parents to understand what information is collected about their children and to prevent that data from being misused.
Regulators are actively pursuing cases involving children’s data, and consumers are increasingly aware of their privacy rights. The Lyon Firm represents individuals and families in data privacy and data misuse matters, including cases involving COPPA compliance failures.
The lawyers at our firm understand federal privacy laws and consumer protection statutes and we work to help protect you and your loved ones.
Taking the first step doesn’t have to be complicated. In just a few minutes, you can share the basics of your case, and our team will guide you from there: