CAW Registry

Obligations

• blocking age_assurance: An operator of a service directed to children under 13, or with actual knowledge it is collecting personal information from a child under 13, must obtain verifiable parental consent before collecting, using, or disclosing that information.

  FTC regulations must require operators to "obtain verifiable parental consent for the collection, use, or disclosure of personal information from children" (15 U.S.C. §6502(b)(1)(A)(ii)).

• material data_use: An operator may not condition a child's participation in an activity on the child disclosing more personal information than is reasonably necessary.

  Regulations must "prohibit conditioning a child's participation ... on the child disclosing more personal information than is reasonably necessary" (15 U.S.C. §6502(b)(1)(C)).

Scope

• applies_to_operator = operator_of_website_or_online_service_directed_to_children_or_with_actual_knowledge

  15 U.S.C. §6501-6502.

• covered_user_min_age = 13

  "The term 'child' means an individual under the age of 13" (15 U.S.C. §6501(1)); it is unlawful for "an operator of a website or online service directed to children, or any operator that has actual knowledge that it is collecting personal information from a child, to collect personal information from a child" without complying with the Rule's requirements (15 U.S.C. §6502(a)(1)). Correction: the prior quote combined language from both sections that does not appear together verbatim; replaced this session with the two real definitional/operative quotes.

Archived copy: raw/primary/a1fc1f856e6a6b901694314472a65dab56d6f5d5d3e40712400441474d4c4633

Verified by hand-2026-09 on 2026-09-08T00:00:00Z

Live primary source: https://www.law.cornell.edu/uscode/text/15/6502