Home Data FTC Updates COPPA With New Restrictions On Location Data, Photos

FTC Updates COPPA With New Restrictions On Location Data, Photos


child-using-ipadThe Federal Trade Commission has officially updated Children’s Online Privacy Protection Act (COPPA) with new restrictions that go into effect today. The changes include a ban on collecting location data from site owners and app developers with properties aimed at children.

Since 2000, COPPA has required website operators whose sites are directed at users younger than thirteen to get parental consent before collecting personal information such as email addresses, home addresses or phone numbers for advertising purposes. The law also applies to sites and apps that are geared toward general audiences that have “actual knowledge” (e.g., a user’s date of birth) that they are collecting information from children under 13.

Under the revised rule, the definition of “personal information” now includes photos, location data, videos and audio recordings of children, as well as persistent identifiers like cookies and mobile device ID numbers. In addition, site owners and app developers are liable for the practices of third-party vendors such as ad networks, plug-ins and audience metrics.

As companies try to make sure that they are compliant with COPPA, the biggest challenge is determining whether the law applies to them, observed David Kahan, SVP of legal affairs and chief privacy officer for the ad network Jumptap.

“We’ve had several clients contact us who were not sure if their sites would be considered as targeting children under 13, but to be safe, have told us to identify them as a site that’s directed at children,” Kahan said.

Publishers also should not assume that ad networks will make that decision for them. “As an ad network, we’re not in the business of determining whether an app is primarily directed at children or not,” Kahan added. “Our default assumption is that we’re allowed to use the person’s persistent identifier from the traffic that comes in. If the site doesn’t tell us that it’s primarily directed at children, we have no way of knowing that and … if that happens we would be innocent but the app developer would not necessarily be viewed the same way.”

Small and medium-sized publishers in particular may struggle to comply with the COPPA updates, noted Alison Pepper, senior director of public policy at the Interactive Advertising Bureau (IAB).

“It’s a little harder for long-tail publishers to find out what’s going on and make sure they won’t be held liable,” Pepper said. “The strict liability standards for publishers is something that requires a lot of due diligence and a lot of internal auditing.”

The IAB, along with several other organizations, had petitioned the FTC to extend the deadline for companies to comply with the COPPA updates, which the FTC ultimately rejected.

Despite the FTC’s efforts to educate companies about the changes, it is impossible to expect all publishers to be ready for the updates, Pepper added. “To the FTC’s credit, they’ve put out a lot of guidance over the past few months to address questions that have come up about COPPA,” she said. “But there are always going to be areas of ambiguity that will need to be resolved.”

Must Read

Advertible Makes Its Case To SSPs For Running Native Channel Extensions

Companies like TripleLift that created the programmatic native category are now in their awkward tween years. Cue Advertible, a “native-as-a-service” programmatic vendor, as put by co-founder and CEO Tom Anderson.

Mozilla acquires Anonym

Mozilla Acquires Anonym, A Privacy Tech Startup Founded By Two Top Former Meta Execs

Two years after leaving Meta to launch their own privacy-focused ad measurement startup in 2022, Graham Mudd and Brad Smallwood have sold their company to Mozilla.

Nope, We Haven’t Hit Peak Retail Media Yet

The move from in-store to digital shopper marketing continues, as United Airlines, Costco, PayPal, Chase and Expedia make new retail media plays. Plus: what the DSP Madhive saw in advertising sales software company Frequence.

Privacy! Commerce! Connected TV! Read all about it. Subscribe to AdExchanger Newsletters
Comic: Ad-ception

The New York Times And Instacart Integrate For Shoppable Recipes

The New York Times and Instacart are partnering for shoppable recipe videos.

Experian Enters The Third-Party Data Onboarding Business

Experian entered the third-party data onboarder market on Tuesday with a new product based on its Tapad acquisition.

Albertsons Takes Its First Steps Into Non-Endemic Advertising, Retail Media’s Next Frontier

Albertsons is taking that first step into non-endemic advertising next week via a partnership with Rokt to serve ads to people who have already purchased groceries.