A game developer wants to reach new markets and is advised by legal counsel to...

The correct regulation is COPPA (Children’s Online Privacy Protection Act). COPPA is a U.S. law that requires organizations to obtain parental consent and implement specific protections before collecting personal data from children under the age of 13. Since the legal counsel is advising about age-related sign-up requirements, the concern clearly points to COPPA compliance.

GDPR (A) is a European regulation governing privacy and data protection but is broader and not specifically tied to children’s age verification, though it has related provisions. LGPD (B) is Brazil’s data protection law, similar in scope to GDPR. PCI DSS (C) is focused on protecting cardholder data in payment environments, unrelated to age-related concerns.

CAS-005 covers the importance of aligning software platforms with legal and regulatory frameworks. For gaming and online services, COPPA compliance is crucial to avoid fines and reputational harm, ensuring the platform properly handles children’s data.