2 cissp ® Official Study Guide Eighth Edition

 Children’s Online Privacy Protection Act of 1998
In April 2000, provisions of the Children’s 
Online Privacy Protection Act (COPPA) became the law of the land in the United States. 
COPPA makes a series of demands on websites that cater to children or knowingly collect 
information from children.
■
Websites must have a privacy notice that clearly states the types of information they 
collect and what it’s used for, including whether any information is disclosed to third 
parties. The privacy notice must also include contact information for the operators of 
the site. 
■
Parents must be provided with the opportunity to review any information collected 
from their children and permanently delete it from the site’s records. 
■
Parents must give verifiable consent to the collection of information about children 
younger than the age of 13 prior to any such collection. Exceptions in the law allow 
websites to collect minimal information solely for the purpose of obtaining such paren-
tal consent.
 Gramm-Leach-Bliley Act of 1999
Until the Gramm-Leach-Bliley Act (GLBA) became 
law in 1999, there were strict governmental barriers between fi nancial institutions. Banks, 
insurance companies, and credit providers were severely limited in the services they could 
provide and the information they could share with each other. GLBA somewhat relaxed 
the regulations concerning the services each organization could provide. When Congress 
passed this law, it realized that this increased latitude could have far-reaching privacy 
implications. Because of this concern, it included a number of limitations on the types of 
information that could be exchanged even among subsidiaries of the same corporation and 
required fi nancial institutions to provide written privacy policies to all their customers by 
July 1, 2001.

---

Laws