Is Edpuzzle COPPA Compliant?

Edpuzzle is one of the few classroom tools that can back a "COPPA compliant" line with something more concrete than a self-written sentence. It participates in iKeepSafe's FTC-approved COPPA Safe Harbor program, an independent review, and it publishes a direct COPPA notice to schools. COPPA compliance is still a duty shared between vendor and district, but Edpuzzle carries more of that weight than most edtech tools do.

Quick Answer: No online service is "COPPA certified" by the government, because the Children's Online Privacy Protection Act (16 CFR Part 312) has no government seal. The strongest real signal a vendor can hold is participation in an FTC-approved Safe Harbor program, and Edpuzzle has it: iKeepSafe FERPA, COPPA, and California Student Privacy (CSPC) certification under 16 CFR § 312.11. That, plus a published COPPA direct notice to educational institutions and a no-account "Open Class" mode, puts Edpuzzle in a strong COPPA position, though your district still owns the consent decision for students under 13.

This article stays tightly on the COPPA legal question: what the law asks of a tool like Edpuzzle, what its Safe Harbor certification actually proves, and how a school lawfully consents on a family's behalf. For the fuller data-collection picture, see Edpuzzle and Student Data Privacy: What Teachers Should Know; for the content-safety design question, see Is Edpuzzle Safe for Students?.

What COPPA Actually Asks of a Video Tool Like Edpuzzle

COPPA is a 1998 federal law, enforced by the Federal Trade Commission, that governs how an online service collects personal information from children under 13. It applies to Edpuzzle whenever a student under 13 answers questions inside an assigned video, because that interaction can generate personal information tied to a child.

The law does not ban collecting children's data. It sets conditions on it. For a tool in Edpuzzle's category, four requirements matter most:

• Notice. The operator must clearly describe what it collects from a child and why, in a place a parent or school can actually find.
• Verifiable parental consent (VPC). Consent must be obtained before collection, though schools can supply it on a family's behalf under a specific pathway covered below.
• Data minimization. The service may collect only what it genuinely needs to run the activity, not extra data "just in case."
• Access and deletion. A parent, or a school acting for them, keeps the right to review a child's information and request its deletion.

The two triggers that pull a tool into COPPA's scope

COPPA reaches an operator in one of two ways, and Edpuzzle can meet the first squarely. A service is covered when it is directed to children under 13, or when it has actual knowledge it is collecting personal information from a child under 13. A general-audience tool used across Grades 3-8 lands in the second bucket the moment a teacher assigns it to a class that includes ten-year-olds.

That is why "we're for everyone" is not a COPPA escape hatch for classroom software. Once a school assigns Edpuzzle to an under-13 class, the actual-knowledge trigger is live, and the law's requirements attach regardless of how the product markets itself.

The Part Most "COPPA Compliant" Claims Leave Out

When a vendor writes "COPPA compliant" on a pricing page with nothing behind it, that phrase is self-attestation: a company grading its own homework. Edpuzzle is a genuine exception, because an outside body approved by the FTC has reviewed its practices.

Edpuzzle holds iKeepSafe's FERPA, COPPA, and CSPC seals and participates in iKeepSafe's FTC-approved COPPA Safe Harbor program under 16 CFR § 312.11 (iKeepSafe, 2024). A Safe Harbor is a self-regulatory organization the FTC has formally approved to certify that a member's data practices meet, or exceed, the COPPA Rule. Membership is voluntary, and it means an independent reviewer, not just the company itself, checked the work.

The three ways a vendor can stand behind a COPPA claim are not equally strong, and it helps to see them ranked:

As the complete FERPA and COPPA guide for schools lays out, that Safe Harbor layer is the strongest evidence available anywhere in the compliance landscape, precisely because a reviewer outside the company assessed the actual product. Most classroom AI tools cannot point to it. Edpuzzle can.

Why a Safe Harbor seal is not the finish line

A certification confirms Edpuzzle's general practices; it does not sign your district's specific contract for you. Two things still sit on the school side. First, a district large enough to need one should still execute an institutional agreement rather than relying on individual teacher signups. Second, the consent question for under-13 students still runs through the school-authorization pathway, which is a school decision the seal does not make automatically.

How a School Consents on a Family's Behalf

COPPA normally requires a parent's verifiable consent, but longstanding FTC guidance lets a school provide that consent as the parent's agent, as long as the tool is used strictly for an educational purpose. This is the mechanism that lets a Grade 4 class use Edpuzzle without a signed form from every family.

The school-authorization pathway is not automatic or unlimited. The FTC's guidance ties it to conditions the vendor's practices must actually match:

1. The tool is used for a school-authorized educational purpose, not a commercial one.
2. The child's data is not used for targeted advertising or sold to third parties.
3. The school is given notice of what the operator collects from students and how to review or delete it.
4. Consent is scoped to the educational context; it does not license open-ended commercial use of a child's information.

Edpuzzle supports this pathway directly by publishing a COPPA Direct Notice to Educational Institutions (updated July 22, 2024), which spells out what it collects from students under 13 and how a school can review or request deletion of that data (Edpuzzle, 2024). That document is exactly the kind of specificity the pathway assumes, and it is worth reading before you rely on the school-consent route.

A cautionary case: what happens when a vendor dumps COPPA on schools

The school-consent pathway has a hard limit, and the FTC drew it clearly in FTC v. Edmodo (2023). The agency found that the edtech provider Edmodo unlawfully required schools and teachers to obtain parental consent on its behalf while failing to give them enough information to do so, and in some cases telling them they were "solely" responsible for COPPA compliance (FTC, 2023). The settlement was the first FTC order barring an edtech provider from forcing students to hand over more data than an activity needs.

The lesson for evaluating any tool, Edpuzzle included, is that the school-consent pathway only works when the vendor does its share: real notice, genuine data minimization, and no attempt to offload the entire legal burden onto a teacher. A published direct notice and a Safe Harbor review are signals a vendor is doing that share rather than shirking it.

What the FTC's 2025 COPPA Amendments Change for Edpuzzle Users

The FTC's 2025 COPPA amendments are the first substantive update to the Rule since 2013. They took effect June 23, 2025, with most provisions requiring compliance by April 22, 2026 (FTC, 2025). The changes tighten the exact areas that matter when a video tool processes student responses, and they raise the bar every vendor, certified or not, now has to clear.

Rather than restate the rule, here is what each change means for a teacher or administrator relying on Edpuzzle with under-13 students:

A Safe Harbor member like Edpuzzle is reviewed against the updated Rule as part of its program participation, which is one practical benefit of the certification: the amendments become the certifier's problem to check, not solely yours. Even so, a district should confirm the retention and deletion specifics in its own agreement rather than assume the seal covers every clause.

A COPPA Readiness Check Before Assigning Edpuzzle Under 13

Before you assign an Edpuzzle video to a class that includes students under 13, walk through a short readiness check so the COPPA pieces are actually in place, not just assumed. None of this requires a law degree; it requires confirming a few facts in writing.

Say you teach Grade 4 science and want to assign a five-minute video on the water cycle with three comprehension checkpoints. Here is a reasonable sequence:

1. Decide whether you even need identifiable data. For a same-day formative check, the no-account Open Class mode lets students respond with a nickname, which sidesteps most of the COPPA question by not collecting personal information in the first place. The mechanics of that mode are covered in the data-privacy companion guide.
2. Confirm your account type. Check whether your class runs under a district institutional agreement or an individual free signup, because the school-authorization pathway assumes the district, not a lone teacher, is the party consenting.
3. Locate the COPPA direct notice. Have it on hand for a parent conversation; it names what is collected from under-13 students and how to request deletion.
4. Verify retention in writing. Confirm the deletion timeline matches the 2025 amendment's requirement for a specific, published policy.
5. Keep the content-creation step separate. You could use EduGenius to generate the comprehension questions and a companion vocabulary worksheet from a Grade 4 science class profile, then adapt those questions into the video timeline, keeping content authoring and student-facing delivery as two distinct steps. Its own student-facing posture is covered in Is EduGenius Safe for Students?.

Does Open Class Remove the COPPA Question Entirely?

Open Class, the mode that lets students respond without an account, comes close to removing the COPPA question, but "no account" and "no personal information" are not automatically the same thing. COPPA attaches to the collection of personal information, so the honest answer depends on what actually gets collected.

When a student joins through Open Class with a randomly generated nickname and submits only answers, no name, no email, no login, there is little or no personal information changing hands, and COPPA has correspondingly little to attach to. That is the cleanest posture a classroom tool can offer, and it is a large part of why the no-account route is so useful for younger grades.

The caveat is worth knowing. COPPA's definition of personal information is broad: it reaches not just names and emails but persistent identifiers, such as a device ID, that can single out a user over time. A truly anonymous nickname session collects essentially none of that; a session a teacher deliberately ties to a real name reintroduces it. The practical guidance follows directly:

• For a same-day formative check, use anonymous nicknames. Collecting no identifiable data sidesteps the consent question rather than merely satisfying it.
• If you attach real names for tracking, you are back in COPPA's scope, and the school-authorization pathway and your institutional agreement matter again.
• Decide per assignment, not once for the year. The right setting shifts with whether you genuinely need identifiable, returnable results.

The step-by-step setup for Open Class belongs to the practical companion guide; the point here is strictly its COPPA effect, which is that anonymity, not the absence of a login by itself, is what shrinks the legal question.

COPPA Mistakes to Avoid With Edpuzzle

• Assuming "certified" means "your district needs no contract." A Safe Harbor certification is platform-wide evidence; it does not replace the institutional agreement that scopes your own retention and deletion terms.
• Relying on a personal free account for an under-13 class. The school-authorization pathway assumes the school is the consenting party; an individual teacher signup outside any district contract weakens that footing.
• Treating the school-consent route as unconditional. As the Edmodo case showed, that pathway collapses if a tool is used commercially, shares data for advertising, or fails to give the school real notice.
• Confusing COPPA with content safety. COPPA is about data collection and consent; whether the videos themselves are appropriate is a separate review, covered in Is Edpuzzle Safe for Students?.

Related Reading

• AI, FERPA & COPPA: The Complete School Data-Privacy Guide (2026)
• Edpuzzle and Student Data Privacy: What Teachers Should Know
• Is Edpuzzle Safe for Students?
• Diffit and Student Data Privacy: What Teachers Should Know
• Quizlet and Student Data Privacy: What Teachers Should Know
• SchoolAI vs Khanmigo: Which Is Better for Teachers?