Sponsors (2)
The bill strengthens and broadens privacy protections and parental/teen control for children and teens online, but does so at the cost of higher compliance and enforcement risk for operators (especially small firms and some nonprofits), possible reductions in child-directed services, and limits on states' ability to set stricter rules.
Children and teens get broader privacy coverage: the law expands covered services and defines 'personal information' to include biometrics and persistent identifiers, protecting more data across more apps and platforms.
Parents and teens gain direct control over a teen's data: parents or eligible teens can review, correct, delete, and refuse further collection of the teen's personal information.
Reduces targeted profiling of kids: operators are barred from collecting or using children's or teens' personal data for individualized advertising, limiting commercial targeting of minors.
Small apps and operators face higher compliance costs and administrative burdens, which could reduce the number of child-focused services or raise prices for parents and schools.
Bans on individualized advertising and tighter limits on data retention and cross-border transfers may force some services to cut features or shut down child/teen offerings that relied on ad revenue or broad data flows.
Expanded FTC authority and broader definitions increase enforcement risk and legal uncertainty for nonprofits and some schools, potentially bringing mission-driven organizations under COPPA obligations.
Based on analysis of 6 sections of legislative text.
Broadens COPPA to cover more services/operators (including apps), expands what counts as children’s personal information, tightens nonprofit exemptions, and requires FTC enforcement and oversight reports.
Official title: To amend the Children's Online Privacy Protection Act of 1998 to strengthen protections relating to the online collection, use, and disclosure of personal information of children and teens, and for other purposes.
Introduced November 25, 2025 by Tim Walberg · Last progress November 25, 2025
Expands and updates the Children’s Online Privacy Protection Act (COPPA) to broaden which services and operators must follow child and teen privacy rules, tightens definitions of personal information, changes who counts as an operator, and narrows the nonprofit exemption. It requires the FTC to report regularly to Congress on enforcement and on how high-impact child-directed social platforms comply. The bill also includes a severability clause so remaining rules stay in force if part is struck down.