U.S. regulation applicable to the collection of personal information from children under the age of 13.
The COPPA Rule says that an operator must choose a method reasonably designed in light of available technology to ensure that the person giving the consent is the child’s parent.
COPPA leaves the method up to you, but it's important to choose a method or system reasonably designed in light of available technology to ensure that the person giving the consent is the child's parent.
If you have actual knowledge that you’re collecting personal information from a site or service that is directed to children, you may get consent directly or through the child-directed site or service.
FTC suggested these method to collect consent:
Sign a consent form and send it back to you via fax, mail, or electronic scan;
Use a credit card, debit card, or other online payment system that provides notification of each separate transaction to the account holder;
Call a toll-free number staffed by trained personnel;
Connect to trained personnel via a video conference;
Provide a copy of a form of government issued ID that you check against a database, as long as you delete the identification from your records when you finish the verification process;
Answer a series of knowledge-based challenge questions that would be difficult for someone other than the parent to answer;
Verify a picture of a driver's license of other photo ID submitted by the parent and then comparing that photo to a second photo submitted by the parent, using facial recognition technology.
If you will use a child’s personal information only for internal purposes and won’t disclose it, you can use 'Email plus': send an email to the parent and have them respond with their consent, send a confirmation to the parent via email, letter, or phone call.
You must give parents the option of allowing the collection and use of their child's personal information without agreeing to disclosing that information to third parties. If you make changes to the collection, use, or disclosure practices the parent already agreed to, you must send the parent a new notice and get their consent.