The rule requires operators of websites and online apps directed at children to obtain parental consent before collecting or sharing personal information, including everything from first and last names and addresses to geolocation data, photos and videos.