Monday, October 2, 2017

DOES YOUR WEBSITE REQUIRE COMPLIANCE WITH COPPA?


If you provide care for any patients under 13 years of age and have a practice website that collects personal data from these young patients, your practice must comply with COPPA (Children’s Online Privacy Protection Act). COPPA is a U.S. federal law implemented in 1998, revised in 2012, and enforced under the auspices of the Federal Trade Commission (FTC).

Among a number of compliance requirements: post a clear, comprehensive privacy policy for information collected online from those under 13 years of age and obtain verifiable parental consent prior to collection, use, and/or disclosure of personal information from anyone under 13 years old. COPPA is controversial and has come under much criticism from legal experts. However, as long as it is the law, dental practices should understand the conditions and requirements of compliance. The basic penalty is $40,000 per violation, stiff enough to make compliance a priority if your practice meets the conditions spelled out under COPPA.

HELP! So, where is help available? The FTC has a new online resource: Children’s Online Privacy Protection Rule: A Six-Step Compliance Plan for Your Business, which includes a detailed assessment to help you determine whether your practice falls under COPPA law and, if so, how to comply.

In addition, the American Dental Association offers a book, A Dentist’s Guide to the Law: 228 Things Every Dentist Should Know, which contains information about COPPA and other laws and regulations affecting dentistry. It is an excellent resource to alert dentists to the myriad laws and regulations for which they may need to seek legal advice. To order a copy, visit the ADA website or call 1-800-947-4746.

No comments: