Congress expands teen privacy rules, restricts targeted ads to minors

What it does

This bill expands the Children's Online Privacy Protection Act (COPPA) to cover teenagers ages 13–16 in addition to children under 13, and strengthens protections by restricting targeted advertising, requiring clearer parental consent, and giving teens direct rights to access, delete, and correct their personal data. It also creates a new category of 'high-impact social media companies' (those with $3B+ revenue and 300M+ monthly users) subject to stricter rules, and requires the FTC to assess whether a single 'common consent mechanism' could streamline parental authorization across multiple platforms.

Why we flagged it

The bill's core function is to extend and strengthen COPPA protections to teenagers and restrict targeted advertising to minors. It is a straightforward consumer-protection measure with no hidden mechanisms or narrow carve-outs.

What the text implies

• The 'common verifiable consent mechanism' provision may create a single-sign-on system for parental consent across platforms, potentially reducing friction for data collection if not carefully regulated—the FTC must assess feasibility, but the bill does not mandate strong safeguards for such a system.
• Educational institutions can now collect student data without parental consent if they have a written agreement with an operator, shifting consent authority from parents to schools; this may reduce transparency for parents of students in schools that sign such agreements.

The full analysis lists 4 implications of this text.

Who stands to gain

Privacy-focused technology vendors; Consent management platform providers; Data security and compliance software firms