Exam Health-Cloud-Accredited-Professional Topic 1 Question 165 Discussion

A is correct because obtaining verified parental consent before collecting and storing any personal information of children is one of the main requirements of COPPA. The consent must be obtained in a way that ensures that the person providing consent is the child's parent or legal guardian, such as using a credit card, digital signature, or video conference.
B is correct because disclosing the organization's privacy policy to parents and obtaining their consent is another requirement of COPPA. The privacy policy must explain what information the organization collects from children, how it uses and discloses it, and what rights parents have to review or delete their children's information.
C is incorrect because ensuring that Bloomington Caregivers' system implementation partner has met all COPPA regulations during the build phase is not a consideration for the company, but for the partner. The company is ultimately responsible for complying with COPPA, regardless of who builds their system.
D is correct because implementing appropriate security measures to safeguard children's personal information is another requirement of COPPA. The organization must establish and maintain reasonable procedures to protect the confidentiality, security, and integrity of personal information collected from children.