Under COPPA, industry groups and others can create self-regulatory programs to meet compliance with the law. These so-called safe harbors require approval from the FTC.