A parent or legal guardian can exercise rights on behalf of their child, which the OCPA defines as an individual under the age of 13. Additionally, sensitive data of a child must be processed in accordance with the Children’s Online Privacy Protection Act of 1998 (COPPA). For children ages 13 to 15, opt-in consent is required to process personal data for targeted advertising or sale.