All information on this website is for informational purposes only and is not legal advice. Ninomiya Law, PLLC and Kent Ninomiya only provide legal advice to clients when there is a valid engagement agreement signed by both attorney and clients. The principal office of Ninomiya Law, PLLC is located in Round Rock, Texas. Ninomiya Law, PLLC is responsible for the content of this website.

Data Collection:

  • Children’s Online Privacy Protection Act(COPPA): COPPA imposes certain requirements on operators of websites or online services directed to children under 13 years of age, and on operators of other websites or online services that have actual knowledge that they are collecting personal information online from a child under 13 years of age. This is why the Facebook lower age limit is 13 years old.
    • An operator must notify a parent that it wishes to collect personal information from the child; that the parent's consent is required for the collection, use and disclosure of the information; and how the parent can provide consent.
  • Gramm-Leach-Bliley Act: Requires financial institutions – companies that offer consumers financial products or services like loans, financial or investment advice, or insurance – to explain their information-sharing practices to their customers and to safeguard sensitive data.
  • Fair Credit Reporting Act: Applies to outside agencies assisting in social media recruiting. There are strict regulations applying to both the agency and the business employing them to be transparent regarding social media searches, to reveal what information was used against the subject, and allow the subject to see what is in their file.
  • Federal Trade Commission Act: Under this Act, the Commission is empowered, among other things, to (a) prevent unfair methods of competition, and unfair or deceptive acts or practices in or affecting commerce; (b) seek monetary redress and other relief for conduct injurious to consumers; (c) prescribe trade regulation rules defining with specificity acts or practices that are unfair or deceptive, and establishing requirements designed to prevent such acts or practices; (d) conduct investigations relating to the organization, business, practices, and management of entities engaged in commerce; and (e) make reports and legislative recommendations to Congress.
  • Electronic Communications Privacy Act of 1986 (ECPA) and similar state laws prohibit the interception or tapping of electronic communications while they are in transit or stored on computers.


EU General Data Protection Regulation: In the European Union, privacy is considered a human right. EU regulations provide much more extensive privacy protections to its citizens than American regulations provide us. This includes the so-called “right to be forgotten.” There is a legal system in place where website providers can be forced to remove some social media content. Google and Facebook have complied with many of these demands, but only for inquiries originating from European IP addresses. The situation is evolving.


​​For more options, see the Your Options page of this website.   

social media data collection laws

keeping you and your family safe