Under COPPA, website and online service operators must meet three main forms of compliance:

• Post their privacy policy
• Send a direct notice to parents and obtain parental consent before collecting information from children
• Obtain new consent when the site’s information practices change in a material way