Under COPPA and various state laws, companies must obtain verifiable parental consent before collecting personal information from children. Consent methods include signed forms, credit card verification, video calls, and knowledge-based authentication. The burden falls on companies to verify the consenting adult is actually the child's parent.