← COPPA · Parental rights

312.6 — Parents may review, delete and refuse further collection

high data-subject-rightsdata-deletionchildren

Requirement

On request, a parent who verifies their identity can obtain a description of the types of personal information collected from their child and the information itself, direct the operator to delete it, and refuse to permit further use or future online collection.

What the engine looks for

Every group below must be satisfied — by an affirmative statement, not a plan, a hedge or a denial — for the control to count as covered. A term ending in … matches any word it begins. Supporting terms do not change the verdict — they raise confidence and distinguish a policy that names a mechanism from one that gestures at a category.

Required element 1 — any one of
parentparentsguardian
Required element 2 — any one of
reviewaccesscopydeletedeletionrefusestoprevoke
Required element 3 — any one of
child's informationchild's personal informationtheir childchildren's informationchildren's datachild's datatheir child's
Supporting terms — specificity signals
312.6verifyidentityrequest

Equivalent controls elsewhere

Matched on shared topics. Satisfying this control usually moves these too.

FrameworkControlTitleShared topics
GDPR Art.17 Right to erasure (“right to be forgotten”) data-subject-rights data-deletion
CCPA/CPRA 1798.105 Right to delete data-subject-rights data-deletion
NDPA 2023 s.34(1)(d)-(e) Right to erasure and restriction data-subject-rights data-deletion
GDPR Art.5(1)(e) Storage limitation data-deletion
GDPR Art.8 Conditions for a child's consent to online services children
GDPR Art.12 Transparent communication and handling of rights requests data-subject-rights
GDPR Art.15 Right of access data-subject-rights
GDPR Art.16 Right to rectification data-subject-rights