US Federal

Can a website collect data from children under 13 without parental permission?

Under 13
Age threshold
$50,120
Max fine per violation
Verifiable cons
Required permission type
COPPA
Governing law
The Short Answer

No, a website cannot collect personal information from children under 13 without verifiable parental consent under U.S. federal law.

What the Law Says

The Children's Online Privacy Protection Act (COPPA) sets strict rules for how operators of websites and online services may collect, use, or disclose personal information from children under 13.

COPPA applies to any operator of a website or online service directed to children under 13—or that has actual knowledge it is collecting personal information from a child under 13. The law requires these operators to obtain verifiable parental consent before collecting, using, or disclosing such information.

Personal information includes names, addresses, email addresses, phone numbers, Social Security numbers, geolocation data, photos, videos, audio files, and persistent identifiers like cookies or device IDs that can track a child over time and across sites.

The Federal Trade Commission (FTC) enforces COPPA and may impose civil penalties of up to $50,120 per violation.

Statutory Text

The term 'operator' means any person who operates a website located on the Internet or an online service and who collects or maintains personal information from or about the users of or visitors to such website or online service, or on whose behalf such information is collected or maintained.

Children's Online Privacy Protection Act, 15 U.S.C. § 6501 — Definitions

What to Do

1

Determine if your website or service is directed to children under 13—or if you knowingly collect data from them.

2

Post a clear, comprehensive privacy policy that describes your data practices for children.

3

Obtain verifiable parental consent before collecting any personal information from a child under 13.

4

Honor parents’ rights to review, delete, or refuse further collection of their child’s data.

5

Implement reasonable data security measures and retain information only as long as necessary.

Sources

Not legal advice. This article is general information based on publicly available sources, written for educational purposes. Laws change and individual situations vary. Consult a licensed attorney in your jurisdiction before acting on anything you read here. Last reviewed: 2026-06-08.