If a business processes the sensitive data of a “known child,” (or an individual younger than 13), it must be in accordance with the Children’s Online Privacy Protection Act of 1998. The definition of “known child” is a child under circumstances where a controller has actual knowledge of or willfully disregards the child’s age. Personal data collected from a known child is also classified as sensitive data.