COPPA · Children's Online Privacy · Evidence & Implementation Kit
Comply with COPPA, without decoding the verifiable parental consent rules yourself.
Every COPPA obligation handed to you as an adopt-ready control, from the directed-to-children scope and the notice through verifiable parental consent to data minimization and deletion, with the evidence the FTC examines.
COPPA-ready in a weekend, not a quarter.
Here is the honest situation. If your site or app is directed to children under 13, or you know you collect their data, COPPA applies, and the FTC enforces it with per-violation civil penalties. It requires a clear notice and privacy policy, verifiable parental consent before collection through specific approved methods, parental rights to review and delete, strict data minimization and deletion, and a written information security program under the recent amendments. Getting the consent method and the notice right, and evidencing it, is weeks of work, and collecting a child's data without verifiable parental consent is exactly where operators fall short.
This Kit removes the guesswork. It is every COPPA obligation written as an adopt-ready control you personalize in a weekend, with the evidence the FTC examines.
What you get, the moment you buy
33
Obligations as adopt-ready controls. Every COPPA obligation, from the directed-to-children scope and the notice through verifiable parental consent, parental rights, data minimization, deletion and security, written so you personalize and apply it.
33
Evidence-they-examine checklists. For each control, exactly what the FTC examines, plus where operators fall short, so you close the gap first.
1
COPPA Control Matrix, pre-built. Every obligation in a working spreadsheet, ready to record status, owner and evidence location.
1
Gap & Readiness Assessment. Score each obligation and the workbook returns your readiness as a single percentage, and exactly what to fix next.
Grounded in COPPA and the FTC COPPA Rule (16 CFR Part 312), with the directed-to-children scope, verifiable parental consent and its methods, parental rights, data minimization and the recent amendments called out. Editable Word and Excel files.
Verifiable parental consent is the whole obligation
COPPA turns on one thing: getting verifiable parental consent before you collect a child's data, through an approved method, and being able to prove you did. This Kit builds the consent workflow and the approved methods with the records, so the requirement the FTC enforces first is handled and evidenced.
What one control looks like
This is determining whether your service is directed to children or triggers actual knowledge, where COPPA begins. All 33 are built to this depth.
COPPA-1 Determine whether the service is directed to children SCOPE
Put this control in place
[Operator] shall assess and document, using the FTC multi-factor test, whether each website, app, or online service is directed to children under 13, evaluating subject matter, visual and audio content, use of animated characters or child-oriented activities, music, age of models, presence of child celebrities, language, advertising directed to children, and competent and reliable empirical evidence about audience composition and intended audience.
Legal note.
A service can be directed to children even if that is not its primary audience; a mixed-audience property may still be covered for its child-directed portions.
Evidence the FTC examines
- Directed-to-children determination memo per property with the multi-factor analysis
- Audience composition data or empirical evidence relied upon
- Screenshots and content inventory used in the assessment
- Sign-off by privacy or legal owner with date
Common finding they raise: Operators often decide informally that a service is general-audience without documenting the multi-factor analysis, leaving no defensible basis if the FTC disagrees.
Why this is not another template pack
- The evidence is the point. A consent you cannot evidence is a violation. This tells you what the FTC examines and where operators fall short, for every obligation.
- Consent and its methods built in. Verifiable parental consent and all the approved methods are written into the controls, plus the recent amendment requirements like the written security program.
- Built on a mapped compliance corpus, not one person's opinion, from a graph of thousands of controls across standards.
- It compounds. COPPA aligns with state children's privacy laws and the CCPA minors rules, so this work feeds a broader youth-privacy program.
Who buys this
Operators of websites and online services directed to children under 13, or that knowingly collect their data, and the privacy, legal and product leads who own COPPA. Whether it is a first assessment or a compliance review, you save weeks and walk in with the notice, consent and evidence ready.
By the end of the weekend you will have
✓ An adopt-ready control for all 33 obligations
✓ A completed COPPA control matrix
✓ The evidence the FTC examines
✓ Your verifiable parental consent workflow in place
✓ A readiness percentage and a fix list
✓ The common shortfalls closed
Common questions
Is it really editable? Yes. Word and Excel files you own and adapt. No portal, no subscription.
Is this legal advice? No. It is an implementation toolkit grounded in COPPA and the FTC Rule. For a specific matter consult counsel; this gets your controls and records in order fast.
Does it cover verifiable parental consent? Yes. The consent requirement and all the FTC-approved methods are their own control group, because it is the core of COPPA.
Does it reflect the recent amendments? Yes, including the separate opt-in for third-party disclosure, the written information security program and the data retention policy.
What if it is not for me? A 30-day money-back guarantee.
Do not collect a child's data without verifiable parental consent.
Every COPPA obligation is fast to adopt with the Kit. It is instant, and it is guaranteed.
Add it to your cart and be COPPA-ready this weekend.
Instant digital download · 30-day money-back guarantee · The Art of Service Pty Ltd, GPO Box 2673, Brisbane QLD 4001 · support@theartofservice.com
