Testing, testing: A review session on COPPA and schools

We often get questions about how the Children’s Online Privacy Protection Act applies in the school setting.

The COPPA Rule gives parents control over what information “an operator of a Web site or online service” -- yes, that includes apps -- can collect from their kids under 13. Among other things, COPPA requires entities covered by the law to notify parents and get their approval before they collect, use, or disclose personal information from children. So how does COPPA apply to schools? Here’s the short answer: Schools -- which are usually part of the local government -- don’t fall within the legal definition of who’s covered by COPPA because they aren’t commercial “operators.” That said, schools sometimes allow, or even require, students to use sites and services that are covered by COPPA and which must provide notice and get verifiable parental consent. COPPA provides important protections for children’s personal information in the commercial space, and also recognizes the special role that schools may play in providing consent for the online collection of information from kids exclusively for educational services -- for example, online testing.