Operators covered by COPPA and the FTC rule must do a number of things to comply with the rule, including providing notice to parents about what data they collect and how they use it, and obtaining verifiable parental consent, with limited exceptions, before collecting personal information online from children.