Two unrelated changes, one direction
On April 22, 2026, a compliance deadline tied to the FTC's amended Children's Online Privacy Protection Rule took effect, requiring operators to get separate, verifiable parental consent before sharing a child's personal information with third parties for targeted advertising or similar purposes. Three weeks later, The Trade Desk published its Q2 2026 release for Kokai, its ad-buying platform, adding upgrades to Deal Desk and moving CTV pause ads into open beta.
Neither company was reacting to the other. But both moves point marketing teams toward the same adjustment: know exactly which data moves where, and be able to prove it, because both the regulator and the platforms are done taking that on faith.
What the FTC actually changed
The FTC finalized amendments to the COPPA Rule in January 2025. They took effect June 23, 2025, with a compliance deadline of April 22, 2026, according to the Federal Register notice and the FTC's own rule page. The core change relevant to marketers: an operator covered by COPPA can no longer bundle consent. Getting a parent's sign-off to run a service is not the same as getting sign-off to hand that child's data to a third-party ad platform for targeted advertising, and the rule now requires the second consent to be obtained separately and be revocable.
A client alert from law firm Davis Polk notes the FTC has signaled it will prioritize enforcement of these new obligations rather than treat the deadline as a grace period. That is a meaningful signal for any team running consumer products, ed-tech tools, gaming properties, or family content where a meaningful share of users could plausibly be minors.
What Trade Desk shipped
The Trade Desk's Q2 2026 Kokai release, published on the company's own resources page and covered by ad-tech trade outlet ppc.land on May 16, 2026, bundles several changes: upgrades to Deal Desk, the tool the company launched in June 2025 to manage private marketplace and programmatic guaranteed deals through an API rather than manual back-and-forth with publishers, and a new open beta for CTV pause ads, which are transacted through those same negotiated deal structures rather than the open exchange.
The throughline is a shift toward inventory and audiences that are pre-vetted and contractually defined, instead of assembled in real time across an open bidstream. The Trade Desk has been explicit that broken or unscaled deal IDs were a persistent problem for advertisers trying to use private marketplaces, and Deal Desk's upgrades are aimed squarely at that.
Why these belong in the same conversation
Both changes reduce how much a marketing team can plausibly claim not to know. COPPA's separate-consent requirement removes the option of routing children's data to an ad platform under a general privacy policy checkbox. The Trade Desk's move toward API-managed deals removes the option of buying audience access through an opaque open-exchange path and shrugging when performance or provenance gets questioned later.
Neither is a technology story on its own. Both are governance stories wearing technology clothes.
What a marketing team should actually do differently
Three concrete actions follow from this, not abstractions:
Audit any property where users under 13 could reasonably be present, even incidentally, and check whether the third-party ad or analytics tags on that property currently rely on a single, bundled consent flow. If they do, that flow needs to be split before an FTC inquiry forces the question. This is a legal and product decision, not a marketing-team-only fix, so loop in counsel now rather than after an inquiry letter arrives.
Second, if the team runs CTV or programmatic spend through The Trade Desk, get someone on the media team into Deal Desk directly rather than leaving deal management to the agency by default. The value of API-managed deals is largely lost if nobody on the client side is watching pacing and quality metrics inside the tool.
Third, treat both stories as one instruction: stop accepting "the platform handles that" as an answer for where data goes or how inventory is sourced. Ask the ad platform and the CDP vendor, in writing, exactly what happens to a given data field or a given impression, and keep that answer on file. Regulators and the platforms themselves are both moving toward requiring that level of specificity. A team that already has it on hand is not scrambling when either one asks.
Sources: FTC Finalizes Changes to Children's Privacy Rule — Federal Trade Commission · Children's Online Privacy Protection Rule — Federal Register · FTC prioritizes COPPA enforcement — Davis Polk · Children's Online Privacy Protection Rule ("COPPA") — Federal Trade Commission · Q2 2026 Kokai release highlights — The Trade Desk · The Trade Desk's Q2 Kokai updates — ppc.land · The Trade Desk debuts Deal Desk — The Trade Desk press room