Are there special privacy rules if children use my website?
The short answer
Yes. In the US, COPPA requires verifiable parental consent before collecting personal information from children under 13 on sites aimed at children or that knowingly collect it. Under the EU GDPR, children under 16 need a parent’s consent where you rely on consent (countries may lower this to 13); in the UK the age is 13.
Applies in US · EU · UK
- US (COPPA): get verifiable parental consent before collecting, using or sharing data from children under 13. The updated COPPA Rule has applied in full since 22 April 2026.
- EU (GDPR Art. 8): where an online service relies on consent, children under 16 need a parent’s consent; each country may set a lower age, but not below 13.
- UK: the age of digital consent is 13.
If your website isn’t meant for children, say so in your terms and avoid collecting data from them. If it is, design for it from the start and take advice.
SlopDox provides compliance assistance only. This is general information to help you prepare — not legal advice, and no guarantee that a law does or doesn’t apply to you. For decisions, speak to a qualified lawyer.
Words used here
- COPPA (United States)
- US law requiring parental consent before collecting personal information from children under 13.
- GDPR (European Union)
- Europe’s privacy law. It applies if you handle personal data of people in the EU — even if your business is elsewhere.
- Personal data
- Any information about an identifiable person — names, emails, addresses, health notes, photos. Privacy laws control how you collect, store and protect it.
Still have a question?
Ask the SlopDox assistant: it answers from this catalog, any time. Or let SlopDox keep track of your websites for you, free for up to 3 websites.