Explainer: How the US seeks to protect children's privacy online

TikTok is under investigation for breaking rules on how children’s personal information is treated online


Reuters July 09, 2020
PHOTO: REUTERS

WASHINGTON:

TikTok is under investigation for allegedly violating a settlement reached with US authorities last year that resolved charges the popular app broke rules governing how children’s personal information is treated online.

The US Federal Trade Commission, which enforces the Children’s Online Privacy Protection Act, or COPPA, and the Justice Department, which often files court actions for the FTC, have opened a preliminary investigation into the matter involving the China-based video-sharing app.

Under rules dating to 1998 legislation, COPPA requires websites to get parental permission to collect data on children under the age of 13. Websites or online services are also expected to ban third parties from collecting the data.

COPPA also applies to mobile apps, gaming platforms, and internet-connected toys, among others.

India’s richest man launches Zoom rival

Under pressure from the FTC, TikTok, owned by China’s ByteDance, agreed in early 2019 to pay a $5.7 million civil penalty for violating COPPA by collecting kids’ first and last names, phone numbers, email addresses, and pictures.

In a bigger settlement, highlighting that TikTok was not alone, Alphabet’s YouTube agreed in September 2019 to pay $170 million to settle allegations it too violated COPPA by tracking kids online.

Under COPPA rules, the definition of personal information ranges from the least sensitive, like street addresses, to the most, such as Social Security numbers. It also includes photographs and videos. Tracking a child as they travel from website to website online also counts as collecting personal information.

Facebook, Instagram will now remind people to wear face masks

The FTC has approved of several companies’ methods for providing age verification for websites. Some will ask a person’s birth date and toss them off the site if they are not 13 or older. They also often make it so that the child cannot change the date to gain entry, said John Verdi of the pro-privacy Future of Privacy Forum.

To comply with COPPA, companies are expected to post a privacy policy that is easy to find and clearly describes what information is collected and how it is used.

COMMENTS

Replying to X

Comments are moderated and generally will be posted if they are on-topic and not abusive.

For more information, please see our Comments FAQ