Under the finalized rule, covered entities will be allowed to retain the personal information of young users only 'for as long as reasonably necessary to fulfill a specific purpose for which it was collected.' This limit aims to curb the potential for misuse of children's data and emphasizes the importance of protecting young users in an evolving digital landscape. The FTC emphasizes that companies must prioritize privacy and safety.