More stringent data deletion and retention requirements added.
Updates to the Children's Online Privacy Protection Act regulation will compel websites and apps to adhere to more stringent data deletion and retention requirements.
According to The Record, the increased restrictions will also include separate and verifiable parental consent necessary prior to data sharing with advertisers and data brokers. These will be effective beginning June 23rd.
Such a new rule was noted by privacy experts to have a significant effect on children's data privacy. "In addition to new disclosure requirements and a massive requirement to create an information security program, it also slows the flow of data to third parties for advertising and other purposes," said Electronic Privacy Information Center counsel Suzanne Bernstein.
Written by
Dan Raywood is a B2B journalist with 25 years of experience, including covering cybersecurity for the past 17 years. He has extensively covered topics from Advanced Persistent Threats and nation-state hackers to major data breaches and regulatory changes.
He has spoken at events including 44CON, Infosecurity Europe, RANT Forum, BSides Scotland, Steelcon and the National Cyber Security Show, and served as editor of SC Media UK, Infosecurity Magazine and IT Security Guru. He was also an analyst with 451 Research and a product marketing lead at Tenable.
