[byjove]

COPPA makes compliance tricky, that is why Google (and others) try to avoid it altogether.

There's still no wide agreement on how to properly implement the ‘paternal permission’ provision, and what sort of data would be allowed to be collected, as even the sort of data that is required to run the service such as processing inbound and outbound messages to identify and filter spam for example can get you into a gray area.