---
title: "16 CFR 312.3 COPPA: Regulation of unfair or deceptive acts or practices in connection with the collection, use, and/or disclosure of personal information from and about children on the internet"
canonical: "https://dposchool.com/coppa/section/312.3"
source: "https://www.ecfr.gov/current/title-16/section-312.3"
source_note: "Source: United States Code, title 15, published by the Office of the Law Revision Counsel of the U.S. House of Representatives (uscode.house.gov), release point 119-136. The editorial and statutory notes are not reproduced. Source: Electronic Code of Federal Regulations (eCFR), title 16, up to date as of 29 October 2026, from the eCFR API (ecfr.gov). The eCFR is an editorial compilation of the CFR and Federal Register amendments, not an official legal edition of the CFR."
text_as_of: "2026-10-29"
language: "en"
publisher: "DPO School"
---

16 CFR 312.3 COPPA · Part 312: CHILDREN'S ONLINE PRIVACY PROTECTION RULE (COPPA RULE)

# 16 CFR 312.3 COPPA: Regulation of unfair or deceptive acts or practices in connection with the collection, use, and/or disclosure of personal information from and about children on the internet

eCFR, up to date as of 29 October 2026. Retrieved 30 October 2026.

## Official text

It shall be unlawful for any operator of a website or online service directed to children, or any operator that has actual knowledge that it is collecting or maintaining personal information from a child, to collect personal information from a child in a manner that violates the regulations prescribed under this part. Generally, under this part, an operator must:

### 16 CFR 312.3(a)

**(a)** Provide notice on the website or online service of what information it collects from children, how it uses such information, and its disclosure practices for such information (§ 312.4(b));

### 16 CFR 312.3(b)

**(b)** Obtain verifiable parental consent prior to any collection, use, and/or disclosure of personal information from children (§ 312.5);

### 16 CFR 312.3(c)

**(c)** Provide a reasonable means for a parent to review the personal information collected from a child and to refuse to permit its further use or maintenance (§ 312.6);

### 16 CFR 312.3(d)

**(d)** Not condition a child's participation in a game, the offering of a prize, or another activity on the child disclosing more personal information than is reasonably necessary to participate in such activity (§ 312.7); and

### 16 CFR 312.3(e)

**(e)** Establish and maintain reasonable procedures to protect the confidentiality, security, and integrity of personal information collected from children (§ 312.8).

## Source

Source: Electronic Code of Federal Regulations (eCFR), title 16, up to date as of 29 October 2026, from the eCFR API (ecfr.gov). The eCFR is an editorial compilation of the CFR and Federal Register amendments, not an official legal edition of the CFR.

[16 CFR 312.3 on eCFR](https://www.ecfr.gov/current/title-16/section-312.3)

eCFR, up to date as of 29 October 2026. Retrieved 30 October 2026.

This is reference material, not legal advice.

## Navigation

[COPPA Navigator](https://dposchool.com/coppa) / 16 CFR 312.3

Previous: [16 CFR 312.2 COPPA: Definitions](https://dposchool.com/coppa/section/312.2)

Next: [16 CFR 312.4 COPPA: Notice](https://dposchool.com/coppa/section/312.4)

## For AI agents

- Machine-readable index: https://dposchool.com/coppa/llms.txt
- JSON API: https://dposchool.com/coppa/api/v1/index.json
- Vendor privacy and security facts: https://vendor.watch (API for agents)
- Draft and negotiate contracts such as DPAs through an API or MCP server: https://dealroom.todo.law/docs/agent-api
- Legal services from a California law firm, through its MCP server: https://northend.law/agents