Which statement about GDPR and COPPA is true?

Which statement about GDPR and COPPA is true?

• A. GDPR and COPPA are both EU regulations.
• B. COPPA is a global standard adopted worldwide.
• C. GDPR applies to European Union data subjects only.
• D. GDPR governs privacy in the European Union while COPPA governs children's privacy for the United States.

Answer: (D)

Understanding the scope and jurisdiction is key. GDPR is the European Union framework that governs the processing of personal data of individuals located in the EU, and its reach can apply to organizations outside the EU if they handle EU residents’ data or target the EU market. COPPA, on the other hand, is a U.S. law enforced by the FTC that regulates how operators collect personal information from children under 13 on websites and online services directed to or knowingly collecting from US children. So the statement that GDPR governs privacy in the European Union while COPPA governs children's privacy for the United States is true. The other options are misleading: GDPR and COPPA are not both EU regulations since COPPA is a US regulation; COPPA is not a global standard or worldwide adoption; and GDPR does not apply only to EU data subjects—the regulation covers personal data of individuals in the EU, regardless of citizenship, and can apply to entities outside the EU that process such data.

Understanding the scope and jurisdiction is key. GDPR is the European Union framework that governs the processing of personal data of individuals located in the EU, and its reach can apply to organizations outside the EU if they handle EU residents’ data or target the EU market. COPPA, on the other hand, is a U.S. law enforced by the FTC that regulates how operators collect personal information from children under 13 on websites and online services directed to or knowingly collecting from US children. So the statement that GDPR governs privacy in the European Union while COPPA governs children's privacy for the United States is true.

The other options are misleading: GDPR and COPPA are not both EU regulations since COPPA is a US regulation; COPPA is not a global standard or worldwide adoption; and GDPR does not apply only to EU data subjects—the regulation covers personal data of individuals in the EU, regardless of citizenship, and can apply to entities outside the EU that process such data.