What is required of website operators under COPPA?

The correct requirement under the Children's Online Privacy Protection Act (COPPA) mandates that website operators secure parental consent before collecting personal data from children under the age of 13. This legislation aims to give parents control over the information collected from their minor children and imposes strict guidelines on how this data can be gathered and used.

While it is true that posting a privacy notice is important and a best practice in general for transparency, it's not the central requirement of COPPA, which specifically emphasizes obtaining parental consent. Therefore, the focus on securing parental consent is critical and speaks directly to the protection of children online.

Regarding the other options, restricting all data collection is impractical and not a requirement of COPPA. It does not require website operators to limit services to children over 18; rather, it protects those under 13. While providing a privacy notice is necessary, it does not replace the parental consent obligation, which is key to compliance with COPPA.