Understand how to handle your audience.
Only want kids 13 and up engaging with your online property? It’s not OK to just block kids 12 and under if your site looks and feels child directed or has content that appeals to them.
Understand what constitutes PII (personally identifiable information).
For example, photos, voice recordings and videos are personally identifiable information, needing full verifiable parental consent. Depending on what you collect and let kids share, make sure you are seeking the correct level of parental consent for what you offer your younger users.
Mobile apps are subject to COPPA regulations and app store regulations too.
Get the proper level of parental consent.
It’s not good enough to just send a parent an email to say their child is interested in signing up for an online service. Avoid violations and ensure your direct notices contain all the relevant information and links needed.
Many businesses update features and content, but fail to update their collection and use of information sections in their privacy policies. Material changes require actions beyond just changing the date of your policy.