TechKnowSurge
CompTIA Security+ 5.4 NIST 800-53 PT-2 NIST 800-53 PT-5
TechKnowSurge Catalog Interactives Meets COPPA or Breaks It?
InteractiveSecurityFree

Meets COPPA or Breaks It?

One thing a children's app or site does per card. Does it meet COPPA, or break it?

⚑ Complete this interactive to capture a CTF flag worth 5 points.

About this interactive

The Children's Online Privacy Protection Act (COPPA) was passed in 1998 and took effect in 2000. It applies to websites and online services aimed at children under 13, and to any service that knows it is collecting personal information from children under 13. What it requires, as the lesson lists it: Parental consent: get a parent's verifiable consent before collecting personal information from a child. Personal information includes a name, address, phone number, photo and the cookies or device IDs used to track a child for targeted ads. A clear notice: say plainly what is collected from children and what it is used for. Parents' rights: let a parent review what has been collected from their child and have it deleted. Limits: collect only what an activity reasonably needs, never make a child hand over more to play or join, and keep the data only as long as it is needed. Security: protect the confidentiality and security of what is collected. The Federal Trade Commission enforces COPPA. The video gives the penalty as $43,200 per violation. The figure is raised each year for inflation and was over $53,000 in 2025.

What you'll learn

Aligned to

CompTIA Security+
5.4 Summarize elements of effective security compliance.
NIST 800-53
PT-2 Authority to Process Personally Identifiable Information
PT-5 Privacy Notice

Key terms

Parental Consent
A COPPA requirement mandating that operators obtain verifiable permission from a parent or guardian before collecting personal information from children under age 13.
Data Transparency
The obligation under COPPA to clearly disclose what data is being collected from children and how it will be used.
Security Safeguards
The COPPA requirement that operators implement reasonable procedures to protect the confidentiality, security, and integrity of personal information collected from children.

Topics

Coppa Childrens Privacy Parental Consent Regulatory Compliance Interactive Streak Sort

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →