FTC bolsters online children's privacy rules
The new rules require websites targeting children to get parental permission before collecting geolocation data and photos
IDG News Service - Websites, mobile apps and online advertising networks targeting children will be required to follow new privacy regulations, including getting a parent's permission before collecting geolocation information and photographs from kids, under new rules announced Wednesday by the U.S. Federal Trade Commission.
The new rules, a revision of existing regulations under the Children's Online Privacy Protection Act (COPPA), also require websites and other online services to get parental permission before collecting IP addresses and mobile devices IDs for children under age 13.
The changes to the rules, praised by privacy advocates, also require third-party companies collecting information on websites targeted at children to get a parent's permission, closing a "loophole" that allowed some plug-ins to collect children's personal information without getting permission, FTC Chairman Jon Leibowitz said during a press conference.
Changes to the FTC's COPPA rule are needed because the Internet has changed significantly, with an explosion of smartphones, mobile apps and social networking, since Congress passed COPPA in 1998, Leibowitz said.
"The Internet of 2012 is vastly different than the Internet of 14 years ago," he said. "Some companies, especially some ad networks, have an insatiable desire to collect information from kids."
The new rules, scheduled to go into effect in July, are designed to give online businesses that provide services to children clear guidelines about collecting personal data, Leibowitz said. The new rules do not prohibit advertising to children online, he said, but address the collection of personal data to deliver targeted, or behavioral, advertising.
"Our rule is simple, effective and straightforward," he said. "Until and unless you get parental consent, you may not track children to build massive profiles for behavioral advertising."
Four U.S. lawmakers attending the press conference praised the changes to the COPPA rules. The new rules will help prevent third-party companies on websites from using "technological tricks" to children's personal information, said Senator John "Jay" Rockefeller, a West Virginia Democrat.
Strengthening the rules is "so much a no-brainer," Rockefeller added. "It should be a universal issue."
The FTC, in strengthening the rules, is doing "the lord's work," said Representative Joe Barton, a Texas Republican.
The rules create a new, streamlined process at the FTC for online companies to propose new ways to get parental permission to collect information. The rules also require online companies to take reasonable steps to release children's personal information only to companies that can keep it secure and confidential.
Digital liberties group the Center for Democracy and Technology and e-commerce trade group NetChoice raised concerns that the new rules may target too many websites.
"COPAA should stay focused on websites that knowingly communicate with children -- not cast a net so wide it is impossible to comply with," Steve DelBianco, executive director of NetChoice, said by email. "I'm amazed at the ambiguity in determining whether a site is covered by COPPA. Despite two years of deliberation, the FTC still has not provided clarity the e-commerce industry needs."
- It's Not Them, It's You: How Customer Experience Impacts Your Identity and Access Management Practices Customers want more online access, but they also want to do less to get there: more mobility with less hassle. More security, but...
- 5 Reasons It's Time For Secure Single Sign-On While cloud-based applications provide many business benefits including lowering capital expenditures, they can also drive up operational expenses by requiring more administration and...
- Identity is the Center of Omnichannel This paper covers the benefits of adding an identity layer to bridge the gaps of simplified access, multiple entry points and authentication -...
- How to Extend Identity Security to Your APIs This paper discusses what these standards and specifications are, how they can be composed with existing standards like SAML, and details about how...
- What Does it Take to Deliver a Superior Customer Experience? The Two Top-Rated Online Retailers, B&H Photo and Crutchfield Electronics, Share Their Secrets Discuss practical CX tools and service methods such as contact center agents and the use of realtime speech analytics to help contact center...
- API Management: The Key to Improving the Consumer Travel Experience Join PhoCusWright's Senior Technology Analyst, Norm Rose, as he shares his insights on how travel suppliers and intermediaries can improve industry data flow... All E-business White Papers | Webcasts