When "Too Much Information" Is Too Much: A Kids’ Guide to Online Privacy
Have you ever been asked to fill in a ton of information just to enter a sweepstakes or sign up for something online? A lot more than maybe your name—like your birthday, email, or address. That’s a lot, right? Let’s talk about why that isn’t always okay.
This is called Data Minimization—collecting the smallest amount of personal information, or data, necessary to provide the service.
Collecting less means less risk if something goes wrong.
When the reason for collecting it is done, it should be deleted. Storing personal details longer than needed increases the chance they could be exposed or misused.
It also helps children learn that it’s okay to pause and think before sharing details online—and to question when a site is asking for more than seems reasonable.
By doing this, CARU helps:
For families, that means more peace of mind. For the online world, it means a healthier place for children to explore and learn. Be on the right side of privacy and join CARU’s COPPA Safe Harbor.
Asking for Just What’s Needed
The Children’s Online Privacy Protection Act, or COPPA, is a U.S. law that protects kids under 13. It says websites and apps should only ask for the information they truly need.This is called Data Minimization—collecting the smallest amount of personal information, or data, necessary to provide the service.
- A math game might need your username and password to save your progress—but it doesn’t need your home address or your family’s phone number.
- An educational app might need your parent’s email for permission—but it doesn’t need your entire browsing history or details about your school.
Collecting less means less risk if something goes wrong.
Not Keeping Information Forever
Imagine if someone stored a photo that you uploaded to the internet for a contest forever, even after the contest was over—and then misplaced it. That’s why COPPA also includes a concept called Limited Data Retention, which means companies can only keep personal information for as long as it’s being used for its original purpose.When the reason for collecting it is done, it should be deleted. Storing personal details longer than needed increases the chance they could be exposed or misused.
Why It Matters for Kids and Parents
When companies follow these principles, kids’ personal details stay safer. Parents can feel more confident letting their children try learning games, apps, and websites when they know those spaces aren’t asking for or holding on to unnecessary information.It also helps children learn that it’s okay to pause and think before sharing details online—and to question when a site is asking for more than seems reasonable.
How BBB National Programs Plays a Role
BBB National Programs Children’s Advertising Review Unit (CARU) has worked with companies for years to help them follow COPPA’s requirements, including data minimization and limited retention. The U.S. Federal Trade Commission (FTC) has approved CARU to run a COPPA “Safe Harbor” program, helping businesses meet—and understand—these standards.By doing this, CARU helps:
- Encourage clear, consistent privacy practices for children’s content.
- Provide best practices to businesses on how to handle kids’ data responsibly.
- Support a safer online environment where collecting less and deleting on time is the norm.
A Safer Approach to the Digital World
Kids shouldn’t have to give away too much about themselves to enjoy an online game, watch a video, or enter a contest. Limiting what’s collected and how long it’s stored isn’t just a legal rule—it’s a way to build safer, more respectful digital spaces.For families, that means more peace of mind. For the online world, it means a healthier place for children to explore and learn. Be on the right side of privacy and join CARU’s COPPA Safe Harbor.