
Your App Doesn't Have to Be 'for Kids' to Owe Kids Privacy: A Small Business Guide to COPPA in 2026
The FTC's amended COPPA Rule, finalized in January 2025 with compliance required by April 2026, reaches any app or website with actual knowledge of users under 13, not just products built for children. It requires a separate opt-in parental consent before sharing a child's data or serving targeted ads, a published retention schedule that bars indefinite storage, and a written security program, with civil penalties above $50,000 per violation. This guide lays out who is covered, which consent methods the FTC accepts, and a seven-step checklist a small team can run without a privacy department.










