FTC Approves TrustArc's Changes to COPPA Rule

TrustArc's proposed modifications to its safe harbor program under the Children's Online Privacy Protection Act rule were approved 2-0, the FTC said in a Monday news release. COPPA bars companies that operate websites and provide online services from "knowingly" collecting personal data from children under 13 unless the companies get parental consent before collecting, using or disclosing such information. The statute also requires them to post comprehensive privacy policies. Under the safe harbor provision, organizations can get their self-regulatory guidelines approved by the FTC if they implement the same or greater protections as those in COPPA. Those organizations still will be subject to commission review and discipline in the safe harbor's guidelines "in lieu of formal FTC investigation and law enforcement," said the release. The agency received six comments in May on the modifications (see 1704190028), which include "a new requirement that participants conduct an annual internal assessment of third-parties’ collection of personal information from children on their websites or online services." TRUSTe changed its name to TrustArc in June.