16 CFR § 312.3 - Regulation of unfair or deceptive acts or practices in connection with the collection, use, and/or disclosure of personal information from and about children on the internet.

---
identifier: "/us/cfr/t16/s312.3"
source: "ecfr"
legal_status: "authoritative_unofficial"
title: "16 CFR § 312.3 - Regulation of unfair or deceptive acts or practices in connection with the collection, use, and/or disclosure of personal information from and about children on the internet."
title_number: 16
title_name: "Commercial Practices"
section_number: "312.3"
section_name: "Regulation of unfair or deceptive acts or practices in connection with the collection, use, and/or disclosure of personal information from and about children on the internet."
chapter_name: "FEDERAL TRADE COMMISSION"
subchapter_number: "C"
subchapter_name: "REGULATIONS UNDER SPECIFIC ACTS OF CONGRESS"
part_number: "312"
part_name: "CHILDREN'S ONLINE PRIVACY PROTECTION RULE (COPPA RULE)"
positive_law: false
currency: "2026-03-24"
last_updated: "2026-03-24"
format_version: "1.1.0"
generator: "[email protected]"
authority: "15 U.S.C. 6501 through 6506."
regulatory_source: "78 FR 4008, Jan. 17, 2013, as amended at 90 FR 16977, Apr. 22, 2025, unless otherwise noted."
cfr_part: "312"
---


# 312.3 Regulation of unfair or deceptive acts or practices in connection with the collection, use, and/or disclosure of personal information from and about children on the internet.

It shall be unlawful for any operator of a website or online service directed to children, or any operator that has actual knowledge that it is collecting or maintaining personal information from a child, to collect personal information from a child in a manner that violates the regulations prescribed under this part. Generally, under this part, an operator must:

(a) Provide notice on the website or online service of what information it collects from children, how it uses such information, and its disclosure practices for such information (§ 312.4(b));

(b) Obtain verifiable parental consent prior to any collection, use, and/or disclosure of personal information from children (§ 312.5);

(c) Provide a reasonable means for a parent to review the personal information collected from a child and to refuse to permit its further use or maintenance (§ 312.6);

(d) Not condition a child's participation in a game, the offering of a prize, or another activity on the child disclosing more personal information than is reasonably necessary to participate in such activity (§ 312.7); and

(e) Establish and maintain reasonable procedures to protect the confidentiality, security, and integrity of personal information collected from children (§ 312.8).