KIDS S836 COPPA 2.0 PASSED SENATE 2026 03 05
page 1 / 12
S.836 — Children and Teens' Online Privacy Protection Act (COPPA 2.0) — Engrossed / PASSED SENATE (2026-03-05)
legislative-text (official, govinfo.gov) . retrieved 2026-06-28
archived for offline mesh reading
------------------------------------------------------------
'''
[Congressional Bills 119th Congress]
[From the U.S. Government Publishing Office]
[S. 836 Engrossed in Senate (ES)]
<DOC>
119th CONGRESS
2d Session
S. 836
_______________________________________________________________________
AN ACT
To amend the Children's Online Privacy Protection Act of 1998 to
strengthen protections relating to the online collection, use, and
disclosure of personal information of children and teens, and for other
purposes.
Be it enacted by the Senate and House of Representatives of the
United States of America in Congress assembled,
SECTION 1. SHORT TITLE; TABLE OF CONTENTS.
(a) Short Title.--This Act may be cited as the ''Children and
Teens' Online Privacy Protection Act''.
(b) Table of Contents.--The table of contents for this Act is as
follows:
Sec. 1. Short title; table of contents.
Sec. 2. Online collection, use, disclosure, and deletion of personal
information of children and teens.
Sec. 3. Study and reports of mobile and online application oversight
and enforcement.
Sec. 4. GAO study.
Sec. 5. Severability.
SEC. 2. ONLINE COLLECTION, USE, DISCLOSURE, AND DELETION OF PERSONAL
INFORMATION OF CHILDREN AND TEENS.
(a) Definitions.--Section 1302 of the Children's Online Privacy
Protection Act of 1998 (15 U.S.C. 6501) is amended--
(1) by amending paragraph (2) to read as follows:
''(2) Operator.--The term 'operator'--
''(A) means any person--
''(i) who, for commercial purposes, in
interstate or foreign commerce operates or
provides a website on the internet, an online
service, an online application, or a mobile
application; and
''(ii) who--
''(I) collects or maintains, either
directly or through a service provider,
personal information from or about the
users of that website, service, or
application;
''(II) allows another person to
collect personal information directly
from users of that website, service, or
application (in which case, the
operator is deemed to have collected
the information); or
''(III) allows users of that
website, service, or application to
publicly disclose personal information
(in which case, the operator is deemed
to have collected the information); and
''(B) does not include any nonprofit entity that
would otherwise be exempt from coverage under section 5
of the Federal Trade Commission Act (15 U.S.C. 45).'';
(2) in paragraph (4)--
(A) by amending subparagraph (A) to read as
follows:
''(A) the release of personal information collected
from a child or teen by an operator for any purpose,
except where the personal information is provided to a
person other than an operator who--
''(i) provides support for the internal
operations of the website, online service,
online application, or mobile application of
the operator, excluding any activity relating
to individual-specific advertising to children
or teens; and
''(ii) does not disclose or use that
personal information for any other purpose;
and''; and
(B) in subparagraph (B)--
(i) by inserting ''or teen'' after
''child'' each place the term appears;
(ii) by striking ''website or online
service'' and inserting ''website, online
service, online application, or mobile
application''; and
(iii) by striking ''actual knowledge'' and
inserting ''actual knowledge or knowledge