What COPPA’s New Rules Mean for Your Kids’ Apps, and What Parents Should Do Next

If your child’s favorite app suddenly asks for more permissions, or limits features until you approve them, it may not be a glitch. A major update to a longstanding children’s privacy law is now in full effect, and it’s quietly reshaping how companies collect and handle kids’ data.

The Federal Trade Commission (FTC) has begun enforcing updated rules under the Children’s Online Privacy Protection Act (COPPA), marking the first significant overhaul since 2013. Experts say families will likely start noticing subtle but important shifts in how apps and platforms operate.

“What’s changing here is less about what parents will immediately see and more about what’s happening behind the scenes,” said Tarlika Nunez-Navarro, a legal analyst and Dean at St. Thomas University College of Law and a former Florida Circuit Court Judge. “These updated rules raise the bar on how companies collect, use, and secure kids’ data — especially when it comes to things like location, identifiers, and behavioral tracking.”

The updated rule expands what counts as “personal information” to include things like biometric identifiers and government-issued IDs, and it requires companies to create formal data retention policies so children’s information isn’t stored indefinitely. Companies must also be more transparent about third-party vendors and obtain parental consent before sharing data, tightening oversight on advertising, analytics, and other behind-the-scenes services.

“For families, that may show up as more permission requests, clearer disclosures, or limits on certain features unless a parent gives consent,” Nunez-Navarro explained. “But a lot of the impact is on the company side — they now have to be much more deliberate about what they collect and how they protect it.”

The real shift, however, is enforcement. The FTC has made children’s data a priority and is signaling that companies that fail to comply could face significant penalties. Regulators are expected to closely examine privacy policies, vendor relationships, and how companies track and document parental consent.

“This is also a good moment for families to take a fresh look at app settings and understand what’s being shared — because even with stronger rules, a lot still depends on user permissions,” Nunez-Navarro said.

That means parents still play a critical role in protecting their children’s data. Reviewing app permissions for access to location, camera, microphone, and contacts is a good place to start, along with turning off unnecessary tracking features. Checking privacy settings on child accounts, removing unused apps, and updating parental controls can also reduce exposure.

Even with stronger regulations in place, the new COPPA rules highlight a simple reality: digital safety doesn’t stop at legislation. It increasingly depends on parents knowing what to look for and when to say no.