Third-Party Collection Oversight (312.2)

The rule requires operators of child-directed online services to oversee any third party that gathers personal information from children, ensuring contracts impose COPPA-compliant safeguards, limits on data use, and mechanisms for monitoring and enforcement. This oversight helps protect children's privacy by extending the operator's responsibilities beyond its own direct collection activities.