COPPA and Safe Harbor Research Note

COPPA and Safe Harbor Research Note

COPPA governs the collection, use, disclosure, retention, security, and parental control of personal information from children under thirteen by covered online services. It does not certify the full safety of an AI interaction.

The FTC's current COPPA FAQ and Safe Harbor page control the basic description. Safe Harbor programs are FTC-approved self-regulatory programs. A company participates through one of those programs. The program, not the FTC, assesses the participant under its approved guidelines.

The 2025 final rule amendments expanded and clarified privacy requirements. The FTC's summary highlights separate parental consent for certain third-party disclosures, data-retention limits, biometric identifiers, and public membership lists for Safe Harbor programs.

PRIVO is on the current FTC-approved list. That establishes PRIVO's program status. It does not establish that KID Company or every KID service is an active participant.

On July 27, 2026, Venture Step could not locate a public KID-specific validation record through PRIVO's general validation route or the public KID pages. This is a verification gap, not a conclusion that the company lacks participation or violates COPPA. Publication should say the exact record was not independently confirmed and provide the company an opportunity to supply the direct validation URL.

The verification unit is the operator plus exact domains, applications, device service, seal destination, audit period, and covered practices. A seal image without a current validation destination is not enough.