There is no single law in the United States that protects your privacy online the way people often assume. Instead there are narrow rules that cover specific situations: one for children under thirteen, one for school records, one for certain kinds of images, plus whatever your state has passed and whatever the platform's own settings allow. Digital privacy literacy is mostly the skill of identifying which of those is in play.
Under thirteen: COPPA and why platforms ask your age
The Children's Online Privacy Protection Act applies to online services directed at children under thirteen, or that know they have users under thirteen. It generally requires verifiable parental consent before collecting personal information from those users, and it gives parents rights to review and delete that information.
This is the actual reason so many platforms set thirteen as a minimum age. It is not a judgment about maturity; it is a company avoiding a legal obligation. It also means that if you signed up under thirteen by entering a false birth year, the protections designed for you may not have been applied.
School accounts and school records are their own category
If your school issued the account, the device, or the network, the school generally sets the rules for it, and most districts state in their acceptable-use policy that activity on school systems can be monitored. That is separate from the question of whether the school can search your personal phone, which is governed by the reasonable-suspicion standard from New Jersey v. T.L.O.
Your education records are covered by FERPA, the Family Educational Rights and Privacy Act. FERPA gives parents rights over those records, and transfers those rights to the student at eighteen or upon enrolling in college. It covers records the school maintains, which is a narrower thing than everything the school knows about you.
What you post is rarely as private as the setting suggests
A private account limits who can see a post directly. It does not control screenshots, it does not prevent a follower from resharing, and it does not remove the copy held by the platform. Direct messages sit on someone else's server and can be saved by the person receiving them.
This is not a reason to avoid posting. It is a reason to treat the audience of anything you send as the people you chose plus anyone they decide to show. That single mental adjustment prevents most of the situations young people later describe as privacy problems.
Intimate images involving minors are a criminal-law problem
Sexual images of anyone under eighteen are treated as child sexual abuse material under federal law. That framing does not change because the person in the image took it themselves, because it was sent willingly, or because the sender and receiver are the same age. This is one of the few areas in youth legal literacy where the consequences are severe and the rules leave very little flexibility.
If an image of you is circulating, NCMEC operates Take It Down, a free service that helps get intimate images of minors removed from participating platforms. Tell a trusted adult, and do not forward the image to anyone, including to prove what happened.
Practical settings worth changing today
A few adjustments do more than any amount of theory: turn off precise location for apps that do not need it, review which apps can access your camera, microphone, and contacts, turn on two-factor authentication on your main email account, and check what your accounts share publicly by default.
The reason to start with your email is that it is usually the recovery route for everything else. Someone with your email can often reset the rest.
Remember this
- U.S. digital privacy is a patchwork: COPPA for under-thirteen users, FERPA for school records, state laws on top.
- School-issued accounts, devices, and networks usually come with monitoring stated in the acceptable-use policy.
- A private account controls direct visibility, not screenshots, resharing, or the platform's own copy.
- Sexual images of minors are criminal regardless of consent or who took them; Take It Down can help with removal.
Sources
This article provides general educational information, not individualized legal advice. KidsKnowRights is not a law firm, and reading this article does not create an attorney-client relationship. Laws vary by state, age, and circumstances, and they change over time. For advice about a real situation, talk with a licensed attorney or a legal aid organization.