What KOSA and COPPA updates actually mean for K-12 families
Cutting through the headlines: what the bills change, what they don’t, and what parents can do today.
What KOSA does
The Kids Online Safety Act (KOSA) adds a “duty of care” on platforms to design products that mitigate specific harms to minors: anxiety, depression, eating disorders, substance abuse, predatory exploitation. The bill has moved through Congress in multiple sessions; implementation details and state-by-state variants continue to evolve.
What it isn’t: a federal parental-control mandate. It doesn’t force platforms to verify ages with ID or hand parents a dashboard. It raises liability when platforms design features (infinite scroll, algorithmic targeting of minors) that foreseeably harm kids.
What COPPA does
COPPA has been the baseline US child privacy law since 1998. Key rules:
- Platforms cannot collect personal information from children under 13 without verifiable parental consent.
- That’s why social media platforms set 13 as the minimum age.
- Recent updates and proposed amendments strengthen enforcement, broaden the definition of personal information, and add protections up to age 17.
What actually changes for families
- Expect more age-verification prompts and more “are you a kid” questions on platforms used by minors.
- Expect more platforms to move to “teen account” default settings with tighter defaults (Meta has already done this; TikTok and Snap have variants).
- Expect enforcement to lag legislation by 12-24 months — your household’s settings still matter more than federal law next Tuesday.
For K-12 schools
- COPPA applies to classroom apps. Schools must get parental consent or use the “school official exception.”
- Monitoring software used by schools (Gaggle, GoGuardian, Lightspeed) raises its own privacy questions unrelated to KOSA/COPPA. Ask the district what’s recorded, for how long.
What to actually do today
- Set platforms to under-18 mode per our Instagram, TikTok, Snap guides.
- Ask your school what software monitors your kid’s device — use our questions sheet.
- Don’t wait for legislation. Every setting you can tune today protects your kid more than any bill.
Common questions
What does KOSA actually do?
It adds a duty of care requiring platforms to design products that mitigate specific harms to minors — anxiety, depression, eating disorders, substance abuse, predatory exploitation. It raises liability when design choices such as infinite scroll or algorithmic targeting of minors foreseeably cause harm.
Does KOSA give parents a dashboard or force ID checks?
No. It is not a federal parental-control mandate, it does not require platforms to verify ages with identity documents, and it does not hand parents a control panel. That is the most common misreading of the headlines.
Why is 13 the minimum age everywhere?
Because of COPPA, which since 1998 has barred platforms from collecting personal information from under-13s without verifiable parental consent. Setting the minimum at 13 is how platforms avoid that obligation. Recent amendments strengthen enforcement, broaden what counts as personal information, and extend some protections to age 17.
What will change for my family in practice?
More age-verification prompts, more platforms defaulting minors into teen-account settings — Meta has already done this and TikTok and Snap have variants — and enforcement lagging legislation by roughly 12 to 24 months. Your household’s own settings still matter more than any bill next week.
What should I ask my child’s school?
Which classroom apps collect data and whether consent was obtained or the school-official exception used, and what monitoring software such as Gaggle, GoGuardian or Lightspeed records, for how long, and who sees it. Those monitoring questions are separate from KOSA and COPPA and are worth asking on their own.