FTC to Step Up Enforcement of Kids Online Privacy Rules

The Federal Trade Commission on Thursday unanimously approved a policy statement calling for a step up in the enforcement of the Children’s Online Privacy Protection Act as it relates to the software and devices used by millions of children for school.

The statement doesn’t change FTC policies related to the collection of kids’ data, only calls for the prioritization of the enforcement of the 20-year-old COPPA as it relates to educational technology.

Digital privacy and children’s advocates have long called for the act, which was last revised in 2012, to be updated to better reflect the data collection practices of current technology. The push intensified during the pandemic as many children were forced to switch to virtual learning, dramatically increasing the amount of time they spent online, as well as the quantity of personal information collected as they completely their schoolwork.

FTC Chair Lina Khan says the statement underscores that children have a right to be educated without having to “surrender to the surveillance” of tech companies. She added that there are early indications that some educational tech companies may be collecting far more data than they need, creating a risk that some students could be profiled and targeted if that data were ever exposed in a breach. 

Under COPPA, companies are barred from collecting children’s data without the consent of their parents and companies can’t deny children access to educational technologies if their parents or school decline to give that consent.

Companies also can’t use children’s collected data for commercial purposes like marketing or advertising. Any stored data must be adequately protected from possible theft and companies aren’t allowed to retain children’s data any longer than necessary.

Some of the commissioners said the the FTC needs to do more to protect children’s privacy by strengthening its own rules. A FTC review of the rule put in place by COPPA has been underway since 2019.

Commissioner Christine Wilson said that if the statement prompts some companies to voluntarily review and revise their practices that’s great. But she said she’s concerned that it could give the illusion that the FTC is taking action. 

“Hopefully, we turn to the important task of completing the rule review,” she said, adding that she urges the FTC to “prioritize and complete it swiftly.”