Minors’ Data Under the New Privacy Stack: COPPA 2.0, Teen Privacy Under the State Laws, and the Compliance Playbook for Any Business Touching Children’s Data

Max L. Landaw, Senior Counsel | InfoLawGroup LLP

Max L. Landaw, Senior Counsel at InfoLawGroup, has over a decade of legal experience focused on counseling businesses of all kinds, with a particular focus on technology companies and businesses operating in closely regulated markets. Max keeps abreast of technological developments that carry legal consequences and counsels clients on vendor transactions, privacy compliance, intellectual property protection, and marketing initiatives.

• Education & Credentials

Max earned his Juris Doctor from UC Hastings College of the Law in 2011 and his Bachelor of Arts in Political Science from UC Berkeley in 2008. He is admitted to practice in California (2011), Texas (2019), and Illinois (2020).

• Recognition & Leadership

Max serves as Treasurer of the Data Privacy Section of the Austin Bar Association.

• Professional Involvement

Max is a member of the International Association of Privacy Professionals (“IAPP”) and holds the CIPP/E, CIPP/US, and AIGP (Artificial Intelligence Governance Professional) certifications. He is also a member of the Association of National Advertisers (ANA).

• Experience

Max advises on privacy law, including rules around minor data protection, across more than fifteen jurisdictions spanning six continents, from the United States and Canada to the European Union, Israel, South Africa, the Gulf States, and markets across Asia Pacific. He drafts data protection agreements and addenda covering both controller-to-controller and controller-to-processor transfers, and advises on responding to data subject requests and inquiries from international supervisory authorities. He also advises on AI governance and on the legal issues raised by AI, drafting AI governance and acceptable use policies, negotiating AI-related provisions in contracts, and counseling on the intellectual property and confidentiality risks raised by AI tools. He has worked with the EU AI Act, and his AI practice frequently intersects with his biometrics work, where he advises on biometric data processing terms in vendor agreements. In helping clients implement privacy by design and default, Max supports new product launches and negotiates SaaS agreements, software licenses, developer and API agreements, and vendor and supplier agreements.

Joyce Kim, Counsel | InfoLawGroup LLP

Joyce Kim is a skilled privacy professional with a focus on resolving complex privacy matters, covering topics such as, uses of consumer data, cookies and tracking technologies, data subject access requests, and data transfers. A significant part of her practice involves the heightened rules that apply to children’s and student data, including COPPA compliance for child-directed and mixed-audience services and privacy counseling for ed-tech providers and the schools they serve. She has a particular mastery for drafting internal and consumer-facing policies, helping clients shape their business practices to safeguard privacy and stay compliant. Joyce is passionate about tracking evolving privacy legislation to keep clients well-informed of developments that may impact their operations.

• Education & Credentials

Joyce earned her Juris Doctor, cum laude, from Washington University School of Law in 2020 and her Bachelor of Arts in Public Policy from the University of North Carolina at Chapel Hill in 2016. She is admitted to practice in Illinois (2021).

• Recognition & Leadership

At Washington University School of Law, Joyce sat on the Investigative Committee of the Honor Council, chaired the Pro Bono Committee of the Public Service Advisory Board, and served as an Associate Editor of the Washington University Journal of Law and Policy.

• Professional Involvement

Joyce is a member of the International Association of Privacy Professionals (“IAPP”) and is both a Certified Information Privacy Professional (CIPP/US) and Artificial Intelligence Governance Professional (AIGP). She is also a member of the National Asian American Pacific Bar Association (NAPABA) and the Association of National Advertisers (ANA).

• Experience

Joyce also brings a wealth of experience and versatile set of skills as a result of her litigation and M&A experience. As a corporate finance associate, Joyce advised on M&A transactions by conducting due diligence and preparing critical agreements. Her strong advocacy skills also stem from representing clients in legal disputes concerning real estate, antitrust, employment, products liability, commercial contracts, and intellectual property rights.

SESSION 1 – The New Regulatory Stack: COPPA’s Amendments and the State Kids’ Codes | 2:30pm – 3:30pm

This session maps the regulatory terrain. Attorneys will learn what the FTC’s amended COPPA Rule changed; how state privacy laws layer teen-consent tiers, sensitive-data treatment, and profiling and targeted advertising limits onto the federal baseline for the 13 to 17 band COPPA does not reach; and a status report on the state age-appropriate design codes, including which provisions are currently enjoined, which are enforceable.

BREAK | 3:30pm – 3:40pm

SESSION 2 – Building the Minors’ Data Compliance Program That Survives an Investigation | 3:40pm – 4:40pm

This session turns the map into a playbook: determining whether a service is “directed to children” and when actual knowledge attaches, including the mixed-audience problem; implementing age assurance without over-collecting the very data the regimes protect; managing advertising, engagement-design, and dark-pattern exposure for minor users; and assembling the documentation file that holds up under FTC and state AG scrutiny. The session closes with Q&A and practical takeaways.