📍 Where you are in the curriculum: Week 27 of 32

You Have Rights Online

You live a significant part of your life online — social media, games, school platforms, streaming services. But did you know there's a robust framework of actual laws protecting your digital rights? Understanding these rights is the first step to exercising them.

Your Digital Rights Framework

Digital rights aren't abstract concepts — they're legally enforceable protections. As a minor, you have some of the strongest digital protections of any group. Here's the framework:

• The right to privacy — Your personal data cannot be collected, used, or sold without proper consent
• The right to informed consent — Companies must clearly explain what data they collect and why
• The right to data deletion — You can request that companies erase your personal information
• The right to be forgotten — You can request removal of personal information from search results and databases
• The right to data portability — In some jurisdictions, you can request a copy of all data a company has about you
• The right to not be profiled — Protections against automated decision-making based on your data

COPPA: The Foundation 🛡️

The Children's Online Privacy Protection Act (COPPA) is the cornerstone U.S. law protecting minors online. While it specifically covers children under 13, its principles affect how platforms treat all minors.

What COPPA requires of companies:

• Post a clear, comprehensive privacy policy describing their data practices
• Provide direct notice to parents about data collection
• Obtain verifiable parental consent before collecting data from children under 13
• Give parents the option to consent to collection without consenting to third-party sharing
• Provide parents access to review their child's data
• Give parents the ability to delete data and revoke consent
• Not condition a child's participation on collecting more data than necessary
• Maintain the confidentiality, security, and integrity of collected data

⚖️ At 13, COPPA's consent requirements no longer apply directly to you, but many platforms still have enhanced protections for users under 16 or 18. The principles of data minimization and informed consent are rights you should ALWAYS exercise.

GDPR: The Global Standard 🌍

The General Data Protection Regulation (GDPR) is the European Union's comprehensive privacy law, but its effects are global — any company serving EU users must comply.

Key GDPR rights that affect you:

• Right to Access (Article 15) — You can request a full copy of all data a company holds about you
• Right to Rectification (Article 16) — You can correct inaccurate personal data
• Right to Erasure / Right to Be Forgotten (Article 17) — You can request deletion of your personal data
• Right to Data Portability (Article 20) — You can receive your data in a usable format and transfer it elsewhere
• Right to Object (Article 21) — You can object to your data being used for profiling or marketing

For minors specifically: The GDPR sets the age of digital consent at 16 (though member states can lower it to 13). Below that age, parental consent is required. The regulation also requires that privacy notices directed at children use clear, plain language.

The Right to Be Forgotten 🧹

The right to be forgotten is one of the most powerful digital rights. It means:

• You can request that search engines remove links to pages containing your personal information
• You can request that companies delete your data from their systems
• You can request that social media platforms remove content about you

This is especially important for minors. Something embarrassing posted when you're 13 shouldn't follow you to college applications at 18. Courts have increasingly recognized that minors deserve stronger "right to be forgotten" protections because young people change and grow.

💡 Real-world example: In California, the "Eraser Law" (SB 568) specifically gives minors the right to request removal of content they posted on websites and apps. Several other states have passed or are considering similar laws.

Why This Matters to You Right Now

At 13, you're at a critical age for digital rights:

1. COPPA's direct protections are transitioning — You're now in a space where you need to be more active about protecting your own data
2. You're creating more data than ever — Social media, school platforms, and apps are all collecting information about you
3. Your digital footprint is growing — What happens to your data now can affect you for years
4. You can start exercising rights directly — Many platforms allow teens to submit their own privacy requests

Key Takeaways

• You have legally enforceable digital rights — they're not suggestions
• COPPA protects children under 13; at 13+, you need to actively exercise your own rights
• The GDPR provides a global framework of strong privacy rights including data access, correction, deletion, and portability
• The right to be forgotten is especially powerful for minors
• Understanding your rights is the first step to protecting yourself in the digital world