Data Collection and Use

The Children's Online Privacy Protection Act of 1998 (15 USC 6501-6506) mandates that any website or online service directed to children under 13, or that knowingly collects information from them, provide a clear privacy policy describing what personal data is collected, how it will be used, and with whom it may be shared, and obtain verifiable parental consent before collection. It also requires reasonable safeguards, limited retention, and deletion of data when no longer needed.