FTC privacy and data security settlements are becoming more prescriptive, offering helpful guidance on best compliance practices. The latest to require detailed measures, and a record $170‑million fine, is the FTC and New York AG’s settlement with Google and YouTube over allegations that YouTube harvested children’s personal data in violation of the Children’s Online Privacy Protection Act Rule. The injunctive relief potentially expands COPPA’s reach to businesses that previously may not have considered the need for COPPA compliance. We cover key aspects of the settlement, the COPPA compliance lessons it offers and enforcement trends. See “Takeaways From 2018 COPPA Developments and a Forward-Thinking Approach to Compliance” (Mar. 13, 2019).