FTC declines to enforce a kids privacy law for data collected to verify users' ages
Briefly

FTC declines to enforce a kids privacy law for data collected to verify users' ages
"Age verification technologies are some of the most child-protective technologies to emerge in decades. Our statement incentivizes operators to use these innovative tools, empowering parents to protect their children online."
"General or 'mixed audience' sites will be allowed to collect minors' data without verifiable parental consent 'for the sole purpose of determining a user's age' if they follow a set of other protocols: they must promptly delete the data after it's finished being used to verify age; they can only disclose the data to third-party providers that have taken 'reasonable steps to determine are capable of maintaining the confidentiality, security, and integrity of the information.'"
"Age-checking-related data collection poses the very threats that COPPA is designed to address, and we have already seen age estimation systems having issues with data breaches."
The Federal Trade Commission announced it will not enforce the Children's Online Privacy Protection Act against websites that collect minors' personal data solely for age verification purposes. Websites must meet specific criteria including prompt data deletion after verification, disclosure only to secure third-party providers, clear user notices, reasonable security measures, and reasonably accurate age determination results. The FTC views age verification technologies as highly protective tools that empower parents. However, privacy advocates like the Electronic Frontier Foundation express skepticism, arguing that age-verification data collection poses threats COPPA was designed to prevent and noting existing vulnerabilities in age estimation systems.
Read at The Verge
Unable to calculate read time
[
|
]