Websites must (1) provide notice of what type of information is being collected and what it is being used for (2) obtain verifiable parental consent for collection/use of said information and (3) establish procedures to ensure confidentiality of data collected.