Lawyers and regulators agree: Err on the side of caution when collecting underage children’s data.

Although the Children’s Online Privacy Protection Act is currently the only U.S. law specifically addressing the collection of children’s personally identifiable information for marketing purposes, data privacy regulations that extend identical protections to children and adults are spreading.