GDPR has become accepted best practise. Time to put COPPA into your framework as well…:
Google and YouTube will pay $170 million to settle a case with the US Federal Trade Commission and New York Attorney General that alleges the tech giant illegally collected the personal information of children.
Under the Children’s Online Privacy Protection Act (COPPA), owners of online services targeted at children need to gain parental consent before collecting data on persons under 13 years of age, which also includes the use of persistent identifying cookies.
The FTC and New York Attorney General put forward the argument in a complaint [PDF] that YouTube channels created to target children needed to comply with COPPA.
“The complaint notes that the defendants knew that the YouTube platform had numerous child-directed channels,” the FTC said.