Online safeguards proposed
New rules would shift burden to app providers instead of kids' parents
The Federal Trade Commission on Wednesday proposed sweeping changes to bolster the key federal rule that has protected children's privacy online, in one of the most significant attempts by the U.S. government to strengthen consumer privacy in more than a decade.
The changes are intended to fortify the rules underlying the Children's Online Privacy Protection Act of 1998, a law that restricts the online tracking of youngsters by services like social media apps, video game platforms, toy retailers and digital advertising networks. Regulators said the moves would “shift the burden” of online safety from parents to apps and other digital services while curbing how platforms may use and monetize children's data.
The proposed changes would require certain online services to turn off targeted advertising by default for children younger than 13. They would prohibit the online services from using personal details like a child's cellphone number to induce youngsters to stay on their platforms longer. That means online services would no longer be able to use personal data to bombard young children with push notifications.
The proposed updates would also strengthen security requirements for online services that collect children's data as well as limit the length of time online services could keep that information. And they would limit the collection of student data by learning apps and other educational-tech providers, by allowing schools to consent to the collection of children's personal details only for educational purposes, not commercial purposes.
“Kids must be able to play and learn online without being endlessly tracked by companies looking to hoard and monetize their personal data,” FTC Chair Lina Khan said in a statement Wednesday. She added, “By requiring firms to better safeguard kids' data, our proposal places affirmative obligations on service providers and prohibits them from outsourcing their responsibilities to parents.”
COPPA is the central federal law protecting children online in the United States, although members of Congress have tried to introduce more expansive online safety bills for children and teenagers since then.
Under the COPPA law, online services aimed at children, or those that know they have children on their platform, must obtain a parent's permission before collecting, using or sharing personal details — such as first and last names, addresses and phone numbers — from a child younger than 13.
To comply with the law, popular apps like Instagram and TikTok have terms of service that prohibit children younger than 13 from setting up accounts. Social media and video game apps typically ask new users to provide their birth dates.
Still, regulators have filed numerous complaints against large tech companies accusing them of failing to set up effective age-gating systems; showing targeted ads to children based on their online behavior without parental permission; enabling strangers to contact children online; or keeping children's data even after parents asked for it to be deleted. Amazon; Microsoft; Google and its YouTube platform; Epic Games, the maker of Fortnite; and Musical.ly, the social app now known as TikTok, have all paid multimillion-dollar fines to settle charges that they violated the law.
The FTC proposed the stronger children's privacy protections amid heightened public concern over the potential mental health and physical safety risks that popular online services may pose to young people online. Parents, pediatricians and children's groups warn that social media content recommendation systems have routinely shown inappropriate content promoting self-harm, eating disorders and plastic surgery to young girls. And some school officials worry that social media platforms distract students from their work in class.