← COPPA · Notice

312.4(b)-(c) — Direct notice to parents

high privacy-noticeconsentchildren

Requirement

Before collecting a child's personal information, the operator makes reasonable efforts to give the parent direct notice explaining what information is being collected, that consent is required, the purposes, any disclosure to third parties (with the identities or categories of recipients and purposes), and that the information will be deleted if consent is not given within a reasonable time.

What the engine looks for

Every group below must be satisfied — by an affirmative statement, not a plan, a hedge or a denial — for the control to count as covered. A term ending in … matches any word it begins. Supporting terms do not change the verdict — they raise confidence and distinguish a policy that names a mechanism from one that gestures at a category.

Required element 1 — any one of
direct noticenotify the parentnotify parentsnotice to parentsemail to the parentemail the parentparental noticeinform parentsinform the parentparents are informedparents are notifiednotice to the parent
Required element 2 — any one of
consentcollect…beforeprior todeletethird parties
Supporting terms — specificity signals
312.4(b)312.4(c)reasonable effortsonline contact information

Equivalent controls elsewhere

Matched on shared topics. Satisfying this control usually moves these too.

FrameworkControlTitleShared topics
GDPR Art.8 Conditions for a child's consent to online services consent children
CCPA/CPRA 1798.120(c)-(d) Opt-in consent to sell or share minors' information children consent
NDPA 2023 s.31 Processing the data of children and persons lacking capacity consent children
GDPR Art.5(1)(a) Lawfulness, fairness and transparency privacy-notice
GDPR Art.6 Lawful basis for processing consent
GDPR Art.7 Conditions for consent consent
GDPR Art.12 Transparent communication and handling of rights requests privacy-notice
GDPR Art.13 Information when data is collected from the data subject privacy-notice