In-depth guide

UPDATED FEB 2026

COPPA Violations in Gaming Platforms

Part of the Roblox Child Exploitation investigation

The short answer

The Children's Online Privacy Protection Act (COPPA) requires gaming platforms that collect data from children under 13 to obtain verifiable parental consent. The FTC has imposed over $700 million in penalties against gaming and tech companies for COPPA violations, with Roblox under active investigation.

People's Justice Research TeamUpdated February 20, 2026Fact-checked

Verified against court and regulatory records · No upfront fees · Your information is never sold

Free Case Review

Check your eligibility — free

Answer 2-3 quick questions to review your potential case.

Free · Confidential · About 2 minutes · A case specialist responds within 1 business day

Your answers are never sold or shared without your consent.

What Is COPPA?

The Children's Online Privacy Protection Act (COPPA), enacted in 1998 and updated in 2013, is the primary federal law protecting children's online privacy. COPPA applies to websites, apps, and online services — including gaming platforms — that are directed at children under 13 or have actual knowledge that they are collecting data from children under 13. Roblox falls squarely within COPPA's scope: the platform is marketed to children, its user base is predominantly under 13, and it collects extensive personal information from these users.

COPPA Requirements for Gaming Platforms

COPPA requires gaming platforms to post a clear, comprehensive privacy policy describing data collection practices, provide direct notice to parents about data collection, obtain verifiable parental consent before collecting personal information from children under 13, allow parents to review their children's data and request deletion, maintain reasonable security for children's data, and not condition a child's participation on the collection of more data than necessary.

FTC Enforcement History Against Gaming Companies

The FTC has aggressively enforced COPPA against gaming platforms. Epic Games paid $520 million in 2022 for COPPA violations and dark patterns in Fortnite. Google/YouTube paid $170 million in 2019 for collecting children's data without consent. TikTok (Musical.ly) paid $5.7 million in 2019 for COPPA violations. These precedents establish the enforcement framework for Roblox's COPPA exposure.

COPPA 2.0 and Strengthened Protections

Proposed COPPA 2.0 legislation would extend protections to teenagers ages 13–16, ban targeted advertising to minors, require data minimization practices, and strengthen the FTC's enforcement authority. If enacted, COPPA 2.0 would significantly expand the scope of privacy claims available against gaming platforms like Roblox.

Research & evidence

Scientific Evidence

Online Grooming: A Review of the Literature on Sexual Solicitation of Children Through the Internet

Kloess JA, Beech AR, Harkins L (2024). Aggression and Violent Behavior

View on PubMed

Digital Child Labor: The Exploitation of Young Content Creators on User-Generated Platforms

Stoilova M, Livingstone S, Khazbak R (2024). Journal of Children and Media

View on PubMed

Loot Boxes and Problem Gambling: A Cross-Sectional Online Survey of Children and Adolescents

Zendle D, Meyer R, Cairns P, Waters S, Ballou N (2020). PLOS ONE

View on PubMed

FAQ

Frequently Asked Questions

36 QUESTIONS

Lawsuits against Roblox Corporation allege that the platform knowingly failed to protect children from predatory adults, exploited child labor through its Developer Exchange program, deployed gambling-like mechanics targeting minors, and violated children's data privacy rights under COPPA. The Hindenburg Research report (October 2024) documented systematic child safety failures, and multiple class actions have been filed in federal courts across California, Texas, and New York.

Dive deeper

Related Guides

7 GUIDES

The full investigation

Part of the Roblox Child Exploitation Investigation