The Children's Online Privacy Protection Act (1998) forces websites and apps to notify parents, get verifiable consent, and let parents review or delete their child's data. The FTC enforces COPPA and can fine companies millions for violations, as it did with YouTube ($170 million, 2019) and Epic Games ($275 million, 2022).