Complying with COPPA ruling (YouTube and Made for Kids)

Hi all

So, in this new world where we now have to ensure we don't collect data from anyone under the age of 13 (in the USA) and, if we do, we adhere to the COPPA ruling ... how are people dealing with this?

I am developing and building an education website and so, in using Jumpstart, I am collecting email addresses to allow people to log into the service (which are then not encoded). This means I am going to fall foul of this ruling (and could face potential prosecution!). This doesn't even touch the fact that the videos are hosted on YouTube and, as such, now all have to be tagged as "Made for kids" - even if the videos are not targeting students age 13 or under (because they "might" watch them).

Sigh. This is all rather challenging.

Chris Oliver   ... I know the ruling is new, but what changes do you feel could be made to the template to ensure that we comply with the ruling. It seems that we can only collect email addresses once - but they have to be encrypted and only used for "password reset" and never to contact the kid - unless we also have parental permission. Parents of students under 13 have to give permission to hold their children's details ... it goes on!

I don't know anything about COPPA. Just saw the YouTube uploader had changed recently.

Any important links I should read?