Your students trust you. Make sure your site does too.
EdTech platforms collect more sensitive data than almost any other sector — from learning patterns to behavioural data of children. COPPA, GDPR Art.8, and the UK AADC all apply. One scan tells you where you stand.
The FTC's updated COPPA rule expands actual-knowledge triggers, third-party disclosure requirements, and retention limits. EdTech platforms with child-directed content or US users should audit pre-consent trackers and privacy policies now — before regulators do.
Does Reject actually stop trackers? We run a 8-session consent matrix — independent of your CMP.
For agencies and advisors: retain written client authorisation. Anonymous scans are limited to properties you operate; major third-party platforms require sign-in.
Scan only URLs you own or have written permission to test.
Regulations that may apply to edtech sites
Educational reference — not a prediction for your scan.
| Framework | What it covers | Statutory ceiling (ref.) |
|---|---|---|
| COPPA 2025 | Verifiable parental consent before any data collection from under-13s | High (FTC civil penalties) |
| GDPR Art.8 | Parental consent for users under 16 in EU/Ireland | Elevated GDPR band |
| UK AADC | Data minimisation, no nudge techniques, privacy by default | Elevated ICO band |
| DSA Art.28 | High level of safety for minors on online platforms | Platform-scale exposure |
| DPC Fundamentals | Best interests of the child, no legitimate interests basis | Elevated GDPR band |
Illustrative statutory maxima from public enforcement examples — not predictions about any scanned site. Automated indicators only; not legal advice.
What ConsentSignals checks for edtech sites
Common questions
Ready to check your edtech site?
Free scan · No sign-up · Preview in a few minutes · Signed PDF on Starter+
Scan now