Court Rules
All enforcement actions
GuidanceLow Risk

FTC Issues COPPA Policy to Incentivize Age Verification Technologies

Operators of General Audience and Mixed Audience Sites and ServicesFebruary 25, 2026Federal Trade Commission

Summary

The FTC issued a policy statement announcing that it will not enforce the COPPA Rule against website and online service operators that use age verification technologies solely to determine user age, provided they comply with conditions such as limiting data use, ensuring security, and providing clear notice. This policy aims to incentivize age verification tools to protect children online.

Remedy

Operators must not use age verification data for any other purpose, retain it only as necessary, disclose it only to secure third parties, provide clear notice to parents and children, employ reasonable security safeguards, and ensure the age verification method is accurate.

Compliance ProgramCorrective Notice

Contract Impact

In-house legal teams should review vendor agreements for age verification services, customer terms of service for websites using such tools, and data processing addendums. Focus on clauses defining data collection purposes, ensuring age data is used solely for age determination without secondary uses like marketing. Examine data sharing restrictions, security obligations (e.g., encryption), notice provisions informing users about age verification, and data retention schedules. Contracts may need amendments to explicitly limit age data use, enhance security requirements, and update privacy notices to reflect COPPA-compliant age verification practices.

Contract Search Terms

age verification technologyverifiable parental consentdata minimizationsole purpose limitationdata security measuresclear noticeCOPPA Rule compliancechildren's personal informationdata use restrictionsparental consent mechanisms

Laws Cited

Violation Types

Entity Details

Entity

Operators of General Audience and Mixed Audience Sites and Services

Also known as: Online Service Operators

Industry

Technology

Official Sources

Source Evidence

Entity Name
"operators of general audience sites and services and mixed audience sites and services"
Laws Cited
"Children’s Online Privacy Protection Act (COPPA)"
Laws Cited
"COPPA Rule"
Violation Types
"collecting, using, or disclosing personal information collected from a child under 13"

Related Enforcement Actions

FTC

GovAssist LLC, Entry LLC, and Scott Zuckerman

The FTC filed a complaint alleging that GovAssist LLC, Entry LLC, and Scott Zuckerman used deceptive paid search ads, misleading service and pricing claims, and fake reviews to deceive consumers seeking passport services. The complaint alleges violations of the FTC Act, the Impersonation Rule, and the Gramm-Leach-Bliley Act; the case will be decided by the court, and no penalty or remedy is reported as imposed.

FTC

Federal Trade Commission

The FTC issued its annual report to Congress describing fraud trends affecting older adults and the agency’s enforcement, education, and outreach efforts. The report is not a specific privacy enforcement action and announces no penalty or remedy.

FTC

REPS & Company Inc.

The FTC referred a complaint against REPS & Company Inc. and company executives, alleging they bypassed ticket-issuer security controls and purchasing limits to acquire millions of tickets for resale. The complaint was filed by the Department of Justice, and the case will be decided by the court; the press release does not report a penalty or other remedy imposed.

FTC

Accelerated Debt Settlement Inc.; ADS Resolve LLC; Financial Solutions Group LLC; Unified Capital Services LLC; Mediwerks; Resolution Specialists LLC; and Futura Capital

$106.8M

A federal court entered a $106.8 million default judgment against corporate defendants in an alleged debt-relief scheme that impersonated banks and government entities and targeted seniors and veterans. The judgment permanently bans the defendants from the debt-relief industry and imposes additional prohibitions, including on impersonation, telemarketing, and misrepresentations.

FTC

Digital Forensics Corporation LLC

The FTC sued Digital Forensics Corporation LLC and affiliated defendants, alleging they misled sextortion victims with promises of investigative and monitoring services that often were not provided, and used fake positive reviews. A federal court granted the FTC’s request to temporarily halt the defendants’ activities; the complaint remains for the court to decide.

FTC

Greenway Auto Group

The FTC alleged that Greenway Auto Group advertised vehicle prices thousands of dollars below the amounts consumers actually paid and used mailers falsely suggesting recipients had won cash prizes. Greenway agreed to an order requiring transparent pricing and prohibiting deceptive prize mailers and other misrepresentations; the press release does not state a monetary penalty.