YouTube's COPPA Deadline Opened a $53,088 Window That PMax Won't Help You Audit

The FTC's amended COPPA Rule became enforceable on April 22, 2026, raising civil penalties to $53,088 per violation and forcing every YouTube creator to classify their content as Made for Kids or not. For advertisers, any impression that lands on a misclassified kids channel through Performance Max becomes a per-occurrence compliance question. PMax does not give placement-level reporting, so most accounts have no way to verify exposure today.

What actually changed on April 22

The amendments were published April 22, 2025 in the Federal Register, took effect June 23, 2025, and gave operators a one-year compliance window that closed Wednesday. Three changes matter for marketers: targeted advertising now requires a separate, specific parental consent layer; mixed-audience properties have to age-screen before collecting any data; and biometric identifiers (faceprints, voiceprints, fingerprints) sit inside the expanded "personal information" definition.

YouTube's response is the audience-setting rule PPC Land covered this week. Every video now requires a Made for Kids or Not Made for Kids designation. Even creators who clearly do not produce kids content have to declare. If YouTube's machine learning disagrees with the creator, it overrides the label and the creator can only appeal through Studio.

Once the MFK label sticks, Google strips the inventory of personalized signal: no remarketing, no audience targeting, no third-party trackers, no device IDs, no IP collection. Only contextual ads serve. YouTube has stated revenue on those channels can fall 95% or more, and that part has been public since 2020. The new piece is the FTC enforcement teeth behind it.

Where this hits advertisers, not just creators

Most coverage of the COPPA deadline frames it as a creator problem. I think that's the wrong frame. The penalty applies to whoever collects personal information from a child, and on YouTube that loop includes the advertisers whose pixels and remarketing tags fire on misclassified inventory. $53,088 per violation, where "violation" can mean per child whose data was collected.

Here's where it gets uncomfortable. Adalytics published research in 2023 and reaffirmed it through 2024 showing behaviorally targeted ads serving on YouTube channels designated for children, including ads from major brands. Google disputed the methodology. Adalytics produced video evidence of cookies and remarketing pixels firing during playback on those channels. Whether you sided with Google or Adalytics in that exchange does not matter much anymore. The FTC just turned the disagreement into a dollar figure.

The brands most exposed here are not the obvious ones. Toy and snack advertisers already manage MFK exposure carefully. The risk is pooled in the accounts that do not think YouTube kids content has anything to do with them: SaaS, automotive, financial services, B2B. They run Performance Max and YouTube Demand Gen at scale, trust Google's contextual signal, and never check where the impressions land.

The PMax visibility problem

Performance Max does not give you channel-level placement reports for YouTube. You can pull aggregate spend by network. You cannot pull a list of YouTube channels your ads ran on, the way you could with classic Video campaigns. Several media buyers on r/PPC have described the workaround as "Whac-a-Mole." You find a kids channel in a placement export, exclude it, and a new one shows up two weeks later.

ZATO Marketing's walkthrough covers the one checkbox that actually does something account-wide: the "Content suitable for families" digital content label, which includes Made for Kids videos. It is the closest thing to a clean opt-out. It also restricts inventory, so the conventional wisdom in performance accounts has been to leave it open and let the algorithm sort it out. That conventional wisdom now has a $53,088 sticker on it.

What "per-violation" actually means in dollars

The $53,088 figure in coverage of the rule is the maximum civil penalty per violation. The number that matters in practice is what the FTC chooses to call one violation. In past COPPA enforcement actions, the agency has counted violations per child whose data was collected, not per company or per piece of content. The 2019 YouTube settlement worked out to $170 million for behavioral data collection from an unspecified but very large number of children. That is not a typo. Per-child math is how COPPA penalties scale.

For an advertiser running Performance Max across YouTube inventory, the exposure surface is the product of three numbers: how much spend went to YouTube placements, what fraction of those impressions landed on misclassified kids inventory, and how many distinct child viewers were involved. None of those are knowable without placement-level reporting. The legal community is already framing this as a discovery problem more than a compliance problem. White and Case's amendment summary walks through where the new consent and data-collection requirements pull in everyone in the ad-serving chain.

The 20-minute MFK audit Performance Max won't run for you

This is a real audit. You can do it today.

1. Pull the last 90 days of YouTube placement reports from any classic Video, Demand Gen, or Display campaigns where the data is available. Filter for any channel name containing "kids," "toys," "nursery," "rhymes," or featured creators in the kid-content tier (Cocomelon, Like Nastya, Kids Diana Show, Ryan's World, Vlad and Niki, BabyBus). Strike Social maintains a working exclusion approach you can compare against.
2. In Google Ads, go to Tools, then Content suitability, then Inventory type, and apply the "Content suitable for families" digital content label across all video and PMax campaigns. The label is not on by default for most accounts.
3. In every Performance Max campaign, add the Made for Kids content exclusion at the campaign level. PMax still will not show placement data after the fact, but the exclusion does apply.
4. Confirm the GTM remarketing pixel firing rules do not trigger on any video embed where the embedded YouTube video is set MFK. Most accounts have one rule for "any YouTube embed" and never check the source video classification.
5. Pull a list of every Customer Match audience tied to a YouTube remarketing list and check the source. If the source pool included any YouTube watch behavior from before April 22, refresh it.

That is the entire audit. The reason most agencies have not run it is not that it is hard. It is that it requires admitting Performance Max has a visibility gap, and a lot of accounts have been treating PMax as a black box that nobody questions.

If you have been running on the same conversion-signal trust assumption for the last year, the smart bidding piece on the same theme is here. Same accountability question, different surface.

The 90-day enforcement window I'm watching

The FTC has signaled it will pursue enforcement aggressively. Commissioner Mark Meador's public statements through Q1 read more like a warning than a prelude. From what I have seen on prior COPPA settlements, the first enforcement action under a new rule tends to land on a recognizable brand within 90 days of the window opening, not on small operators. Google and Meta have absorbed past COPPA actions in the eight and nine figures. An advertiser in the loop on a misclassified placement has not been the named defendant yet, but that gap may not last.

The honest read: most accounts will not run this audit until something breaks publicly. A name brand will land in an FTC consent order, the trade press will frame it as "advertiser caught buying ads on kids channels," and procurement teams will start asking media buyers for documented MFK exclusion procedures. Documentation is not the kind of thing you assemble after the call from legal. It is either on file or it is not.

Notice Me Senpai Editorial