COPPA works like this: Let’s say your child wants to use features on a site or download an app that collects their personal information. Before they can, you should get a plain language notice about what information the site will collect, how it will use it, and how you can provide your consent. For example, you may get an email from a company letting you know your child has started the process for signing up for a site or service that requires your child to give personal information. Or you may get that notice on the screen where you can consent to the collection of your child’s personal information.
That notice also should have directions on how to give your consent. Sites and services have some flexibility in how to do that. For example, some may ask you to send back a permission slip. Others may have a toll-free number you can call.
If you agree to let the site or service collect personal information from your child, it has a legal obligation to keep it secure.