Box 4.2 FTC Regulations Implementing the Children's Online Privacy Protection Act The privacy policy notice that must be displayed at a Web site that collects personal information from a child must include: The name and contact information for all operators collecting or maintaining information collected through the site; The type of personal information collected from the child, the method of collection, and how the operator uses the information collected; Whether the operator discloses the information to third parties; if so, the operator must also disclose the kinds of business that the third parties are engaged in, the general purposes the information is used for, and whether the third parties have agreed to maintain the confidentiality and security of the information; The parent's option to agree to the collection and use of the information without consenting to disclosure to third parties; A notice that the operator may not require the child to disclose more information than is reasonably necessary to participate in an activity as a condition of participation; A notice that the parent can review the information provided by the child, can ask to have it deleted, and can refuse to allow any further collection or use of the child's information, as well as the procedures for the parent to do so. The regulations make clear that the notice may not include unrelated or confusing materials. Source: Adapted from information available online at <http://www.ftc.gov/bcp/conline/pubs/buspubs/coppa.htm>.