Children and Teens’ Online Privacy Protection Act
Sponsored By: Senator Markey, Edward J. [D-MA]
Passed Senate
Summary
expand COPPA to cover teens and modern online technologies. This bill would broaden the Children’s Online Privacy Protection Act to explicitly protect teens and to cover websites, apps, mobile apps, and connected devices while tightening consent and advertising rules for youth data.
Show full summary
- Families and teens: Teens (ages 13 to under 17) would get teen-specific rights to verifiable consent, access copies of their data, request deletion, and challenge inaccuracies. Parents would receive clear notices and consent tools about what is collected and why.
- Operators and advertisers: The bill would widen the definition of personal information to include persistent identifiers and biometric data and would prohibit individual-specific advertising to children and teens while allowing contextual ads and certain household-targeted ads. It would require operators to limit retention, implement reasonable security practices, and avoid using data collected for internal operations for other purposes.
- Schools and regulators: Operators working with schools would have to provide detailed notices and let schools review or request deletion of student data. The Federal Trade Commission would study a common verifiable consent mechanism and publish guidance within 180 days, and the Government Accountability Office would report on teens' use of financial technology within 1 year.
Personalized for You
How does this bill affect your finances?
Personalize government policy and PRIA will tell you what this bill means for your household, plus every other piece of legislation we track. PRIA reads each provision against your financial profile to show you exactly what matters to your wallet.
Bill Overview
Analyzed Economic Effects
6 provisions identified: 5 benefits, 0 costs, 1 mixed.
Clear consent and data rights for minors
If enacted, companies would need to give clear notices about what they collect and how they use it for children and teens. They would need verifiable consent from a parent for a child, or from a teen, before collecting, using, or sharing personal information. They would need new consent before any material change in how the data is used. Teens would be able to see what data a company has on them, ask for a copy, delete it, and fix errors.
Limits on ads and data retention
If enacted, companies would have to delete a child’s or teen’s data when it is no longer needed to provide the requested service, unless the law requires keeping it longer. They would have to tell the parent or teen before storing or sending personal information outside the United States. Companies would be barred from collecting, using, sharing, or keeping minors’ data for individual-specific ads to children or teens. Limited internal operations like security, basic analytics, and contextual ads would still be allowed, but those data could not be used to contact, profile, or target minors beyond what is permitted.
Privacy rules would extend to teens
If enacted, this bill would expand COPPA to cover teens ages 13 to under 17. It would apply to websites, online and mobile apps, and connected devices. More data would count as personal information, like names, contact info, persistent IDs, photos, geolocation, and biometrics. A company would be treated as collecting data if it lets others collect from users or lets users post personal information. Short voice recordings could be excluded only if the company gives clear notice, uses them just to complete a task, and deletes them right away.
FTC guidance and state enforcement for minors
If enacted, the FTC would issue guidance within 180 days on when a service is treated as knowing a user is a child or teen. The guidance would not create new rights or bind enforcement. The FTC would report to Congress in 3 years on platforms for kids’ apps and publish required materials. States would be able to bring actions under the law. The GAO would study teens’ use of financial apps and report within 1 year. Any new rules would need a small‑business impact analysis.
Stronger data security for minors
If enacted, companies that collect children’s or teens’ personal information would need to use reasonable security practices. These practices would protect the data’s confidentiality, integrity, and availability. They would also protect against unauthorized access.
Bank regulators would enforce kids’ privacy
If enacted, the bill would assign enforcement for insured banks to the appropriate federal banking regulator instead of the FDIC Board. This would not change families’ rights, but it would change which agency oversees bank compliance.
Sponsors & CoSponsors
Sponsor
Markey, Edward J. [D-MA]
MA • D
Cosponsors
Sen. Cassidy, Bill [R-LA]
LA • R
Sponsored 3/4/2025
Sen. Cantwell, Maria [D-WA]
WA • D
Sponsored 3/4/2025
Sen. Schatz, Brian [D-HI]
HI • D
Sponsored 3/4/2025
Sen. Capito, Shelley Moore [R-WV]
WV • R
Sponsored 3/4/2025
Sen. Klobuchar, Amy [D-MN]
MN • D
Sponsored 3/4/2025
Sen. Crapo, Mike [R-ID]
ID • R
Sponsored 3/4/2025
Sen. Wyden, Ron [D-OR]
OR • D
Sponsored 3/4/2025
Sen. Grassley, Chuck [R-IA]
IA • R
Sponsored 3/4/2025
Sen. Luján, Ben Ray [D-NM]
NM • D
Sponsored 3/4/2025
Sen. Blumenthal, Richard [D-CT]
CT • D
Sponsored 3/4/2025
Sen. Merkley, Jeff [D-OR]
OR • D
Sponsored 3/4/2025
Sen. Welch, Peter [D-VT]
VT • D
Sponsored 3/4/2025
Sen. King, Angus S., Jr. [I-ME]
ME • I
Sponsored 3/4/2025
Sen. Kelly, Mark [D-AZ]
AZ • D
Sponsored 3/4/2025
Sen. Britt, Katie Boyd [R-AL]
AL • R
Sponsored 3/4/2025
Sen. Heinrich, Martin [D-NM]
NM • D
Sponsored 3/4/2025
Sen. Ossoff, Jon [D-GA]
GA • D
Sponsored 3/24/2025
Sen. Schumer, Charles E. [D-NY]
NY • D
Sponsored 5/13/2025
Sen. Cornyn, John [R-TX]
TX • R
Sponsored 7/28/2025
Sen. Kim, Andy [D-NJ]
NJ • D
Sponsored 11/3/2025
Sen. McCormick, David [R-PA]
PA • R
Sponsored 12/16/2025
Roll Call Votes
No roll call votes available for this bill.
View on Congress.gov