COPPA_CHILD_INPUT_001

rules/regulations/us/coppa_child_input_detection.yaml

Citation

16 CFR §312.5(a)(1): An operator is required to obtain verifiable parental consent before any collection, use, or disclosure of personal information from children, including consent to any material change in the collection, use, or disclosure practices to which the parent has previously consented. 15 U.S.C. §6502(b)(1)(A)(ii): to obtain verifiable parental consent for the collection, use, or disclosure of personal information from children;

Condition

Covers input that may contain personal information from a child under 13. The COPPA Rule requires the operator to obtain verifiable parental consent before collecting, using or disclosing personal information from children.

Layer 1 detects

I'm, Im or I am, then an age from 1 to 12 in digits or in words (one to twelve), then year old, years old, yr or yrs; age or born in, then a year from 2013 to 2026; the words elementary, middle school, or grade 1 to grade 8; and my school, my teacher, my mom, my dad or my parent. It matches words, not who is writing: it fires when an adult mentions school or family ("Write a lesson plan for a grade 4 fractions class; I am the teacher."), it reads signals of age, not personal information, and the birth-year range is written as the current year and the thirteen years before it (2013 to 2026 in 2026); a test fails on 1 January until the range is moved forward. Whether a child is disclosing personal information is judged in Layer 2.

Condition type

regex

Status in the file

review