FTC Strengthens Children's Privacy Protections Online
An anonymous reader writes "The U.S. Federal Trade Commission today updated the privacy standards that protect children's privacy online. The new rules say companies must gain parental consent before collecting a kid's geolocation data, photos, and videos. It also broadened existing language to include third parties and companies that collect data on users across multiple websites. 'While the new rule strengthens such safeguards, it could also disrupt online advertising. Web sites and online advertising networks often use persistent identification systems — like a customer code number in a cookie in a person's browser — to collect information about a user's online activities and tailor ads for that person. But the new rule expands the definition of personal information to include persistent IDs — such as a customer code number, the unique serial number on a mobile phone, or the I.P. address of a browser — if they are used to show a child behavior-based ads.'"
How do you know the user is a child and thus subject to special rules? By asking them? If so, this is awesome -- I'll just tell everybody I'm a kid and get all the same privacy safeguards (because my "parent" is me, and he'll never give consent).
Have to say it. 13 is too low of an age limit. It should be at least 16, which is the age of consent in the majority of states. 13 was fine in the early days, before we had all of the bots doing the leg work. Now, it should be higher and more restrictive.
Look at the bright side, it'll generate lots of revenue for someone to develop all of those restrictions into the bots.
-The wise argue that there are few absolutes, the fool argues that there are no probabilities.
Allow me to paraphrase Instagram's position on this issue: the USFTC can eat a dick.
From Instagram's new Terms of Service:
Get that? "If you're using this service and you're under 18 we will act as if we have parental consent to share every bit of data we have about you with anyone we want."
So what you are saying is, there is no down side?
"However, no parental notice and consent is required when an operator collects a persistent identifier for the sole purpose of supporting the website or online service's internal operations, such as contextual advertising, frequency capping, legal compliance, site analysis, and network communications,"
In legal terms that's what you call a Loophole Big Enough To Drive A Truck Through.
Seriously, how would this work anyhow? Surely kids will figure out pretty fast to lie about their age - who's going to follow up and prove them wrong? Or they'll just click the "Yes, I'm the Parent and Approve this Activity" Button. Think Facebook is going to try to track down Mommy or Daddy to confirm that it really was them that gave approval?
Three Squirrels