---
kind: "section"
citation: "16 C.F.R. § 312.3"
title: "16"
number: "312.3"
heading: "Regulation of unfair or deceptive acts or practices in connection with the collection, use, and/or disclosure of personal information from and about children on the internet."
url: "https://uscodex.org/cfr/16/312.3"
---

# §312.3. Regulation of unfair or deceptive acts or practices in connection with the collection, use, and/or disclosure of personal information from and about children on the internet.


It shall be unlawful for any operator of a website or online service directed to children, or any operator that has actual knowledge that it is collecting or maintaining personal information from a child, to collect personal information from a child in a manner that violates the regulations prescribed under this part. Generally, under this part, an operator must:

- (a) Provide notice on the website or online service of what information it collects from children, how it uses such information, and its disclosure practices for such information ([§ 312.4(b)](/cfr/16/312.4.md?p=b));
- (b) Obtain verifiable parental consent prior to any collection, use, and/or disclosure of personal information from children ([§ 312.5](/cfr/16/312.5.md));
- (c) Provide a reasonable means for a parent to review the personal information collected from a child and to refuse to permit its further use or maintenance ([§ 312.6](/cfr/16/312.6.md));
- (d) Not condition a child's participation in a game, the offering of a prize, or another activity on the child disclosing more personal information than is reasonably necessary to participate in such activity ([§ 312.7](/cfr/16/312.7.md)); and
- (e) Establish and maintain reasonable procedures to protect the confidentiality, security, and integrity of personal information collected from children ([§ 312.8](/cfr/16/312.8.md)).

## Notes

### Authority

Authority: 15 U.S.C. 6501 through 6506.

### Source

Source: 78 FR 4008, Jan. 17, 2013, as amended at 90 FR 16977, Apr. 22, 2025, unless otherwise noted.