COPPA 16 CFR 312.4(d)(1)-(5) - Assess and complete amended online notice content
Assess and complete operator, data-use, disclosure, retention, internal-operations, audio and parental-rights notice content
Where this comes from
Provision: 16 CFR 312.4(d)(1)-(5) - Assess and complete amended online notice content
Instrument: Children's Online Privacy Protection Act (COPPA)
Citation: 16 CFR 312.4(d)(1)-(5), 312.5(c)(7)-(9) and 312.10; 90 FR 16918 (22 April 2025), effective 23 June 2025, general compliance date 22 April 2026
Text version: 16 CFR 312.4 and 312.5(c), eCFR displayed through 3 September 2026, retrieved 6 September 2026; 2025 final rule, 90 FR 16918
Checked against the source: 6 September 2026
Who it applies to
It applies when all of these are true:
- COPPA assessed activity Q_COPPA_COVERED_ACTIVITY: YES
What engineering work it implies
Sample acceptance criteria Landfall generates for this obligation:
- Assess the actual 312.5(c) notice pathway; identifier-only internal operations and request-response audio retain their online notice duties, while (c)(8) requires every condition for its notice exemption.
- List every operator's name; include all operators' address/phone/email or one responding operator's complete contact details. An on-request-only operator list is insufficient.
- Describe information collected, public-availability features, uses, third-party identities and specific categories, disclosure purposes and the written 312.10 retention policy with collection purposes, business need and deletion timeframes.
- If using 312.5(c)(7), describe specific internal operations and safeguards against individual contact, behavioral advertising, profiles and other impermissible identifier uses.
- If using 312.5(c)(9), describe audio use and immediate deletion after responding to the child's request; consent-exception claims do not erase this online disclosure.
Evidence an auditor expects
- Assessment documentDocument review
Notice assessment, contents and operational evidence
Source-version and activity-specific notice assessment with implemented evidence: Assess the actual 312.5(c) notice pathway; identifier-only internal operations and request-response audio retain their online notice duties, while (c)(8) requires every condition for its notice exemption. List every operator's name; include all operators' address/phone/email or one responding operator's complete contact details. An on-request-only operator list is insufficient. Describe information collected, public-availability features, uses, third-party identities and specific categories, disclosure purposes and the written 312.10 retention policy with collection purposes, business need and deletion timeframes. If using 312.5(c)(7), describe specific internal operations and safeguards against individual contact, behavioral advertising, profiles and other impermissible identifier uses. If using 312.5(c)(9), describe audio use and immediate deletion after responding to the child's request; consent-exception claims do not erase this online disclosure. Where applicable, describe and test parental review/deletion/refusal of further collection/use procedures; reconcile the notice with implemented controls and material changes using minimized evidence. A generated task or DRAFT source is not consent, an exception determination or legal approval.
Questions people ask
- Does COPPA 16 CFR 312.4(d)(1)-(5) - Assess and complete amended online notice content apply to my service?
- It applies when COPPA assessed activity Q_COPPA_COVERED_ACTIVITY: YES.
- From when does this apply?
- COPPA 16 CFR 312.4(d)(1)-(5) - Assess and complete amended online notice content applies from 22 April 2026. Its current status is: in force.
- What evidence does an auditor expect?
- Notice assessment, contents and operational evidence.
Find out whether this one lands on you
Landfall's pre-scan answers the applicability question above for your product in minutes, then turns every obligation that applies into traceable engineering tickets with a citation chain your auditors can follow.
Not legal advice. Landfall maps regulatory obligations to engineering work for planning purposes. Its verdicts are not legal advice and create no attorney-client relationship — verify with qualified counsel before relying on them.