In October 2009, the FTC announced that Iconix Brand Group agreed to pay $250,000 to settle charges that it violated COPPA by knowingly collecting, using, or disclosing personal information from children online without first obtaining their parents' permission. According to the FTC, Iconix required consumers on many of its brand-specific websites to provide personal information, such as full name, email address, zip code, and in some cases mailing address, gender, and phone number as well as date of birth in order to receive brand updates, enter sweepstakes contests, and participate in interactive brand-awareness campaigns and other website features.

In January 2010, CARU (Children's Advertising Review Unit) announced that Build-A-Bear Workshop had agreed to modify its website after CARU expressed concern that the site allowed a visitor under the age of 13 to submit an email address to sign up for an e-newsletter without first sending a notice to a parent; visitors seeking to register for the site's Stuff Fur Stuff Club could click the browser's back button and change their date of birth to reflect an age over 13 and then continue and enter personally identifiable information; and the site's e-card feature collected personally identifiable information (PII) from children under 13 and allowed them to disclose PII in an e-card without first obtaining prior parental consent.