Understanding the COPPA Update

Privacy expert and veteran in the field, Debbie Reynolds, highlighted the importance of the COPPA update. On a recent industry podcast, she noted, “It is a big deal. And I think because there’s been so much other activity in the news, people haven’t really paid attention to it.”

The primary change requires companies to obtain verifiable parental consent before they can target ads to children. This requirement, while straightforward on the surface, poses significant challenges in implementation. These challenges are due to the need for companies to ensure that the consent is truly from a parent or guardian, rather than a child clicking a button.

As Debbie Reynolds articulated, “Part of the confusion around privacy and the challenge companies will have with the update of COPPA is trying to figure out how to do things like how do you get verifiable quote-unquote parental consent beyond just having someone click a button to say, ‘Hey, yeah, my parents said, ‘Yes.’”

The Challenges of Verifiable Parental Consent

One of the most contentious issues is how to achieve verifiable parental consent. Will ad-supported streaming services like Netflix or Disney+ start asking parents to share copies of their driver’s licenses? And, more critically, will parents feel comfortable doing so?

Reynolds raised a valid concern: “Anything that you give to these companies, they’re collecting, they’re storing. And then that brings up, do I trust this company enough to give them my ID, especially seeing the rash of data breaches. It’s just going to be challenging going forward to see how companies really try to handle this issue.”

Thus, the introduction of real world practices and detailed verification protocols like photo ID becomes a complex matter of security.

Some might argue that the alternatives, like email verifications, are simpler but less secure, making it a tough balancing act between compliance and user experience. Already, companies are experimenting with facial recognition and other biometric methods. Instagram, for instance, has introduced facial selfies to verify age. However, as Reynolds pointed out, “It’s extremely hard for kids between 13 and 18 — sometimes you can’t tell how old a kid is really.”

The Rise of Age-Gate Barriers

Reynolds also touched on the effectiveness of age gates, asserting that while these gates are a first step, companies will need to do more, particularly if they want to ensure that they are not merely collecting personal data for marketing purposes.

She argued, I think in the future, it’s going to be more around actual knowledge. The fact that these companies collect so much data about people, maybe you have [an age] gate to start, but as you’re going through these experiences, they may be getting clues about what your actual age is.

International Trends and Their Impact on U.S. Regulations

The U.S. is part of the Five Eyes intelligence alliance, which includes Australia, Canada, New Zealand, and the United Kingdom. Over the past few years, these countries have been increasingly focusing on child privacy. In Australia, for example, recent updates to privacy laws bar children under 16 from using social media, a move that has sent shockwaves through the gaming and social media industries. This shift has led to speculation that similar regulations could be implemented in other countries, including the U.S.

The Potential for Further Restrictions in the U.S.

In the U.S., there are ongoing discussions about tightening child privacy laws. The FTC’s updates to COPPA have sparked broader debates about the types of data companies can collect and how they should be regulated. This has also led to legislative proposals aimed at bolstering digital privacy protections for minors, which could pave the way for stricter guidelines that force companies to scrutinize their data collection practices more robustly. This issue resonates deeply with parents and advocates concerned about the online safety of young Americans. According to a 2023 Pew Research Center survey, 69% of U.S. adults view protecting children’s privacy online as a critical concern.

Looking Ahead: The Future of Child Privacy

The implications of these changes extend far beyond a child’s ability to see targeted ads. As digital interactions become more integrated into daily life, the protection of children’s data is paramount. Companies must innovate new ways to verify parental consent without compromising user trust or system security. Recent high-profile data breaches remind us of the importance of robust verification systems that can withstand cyber threats.

As the digital landscape continues to evolve, so too must the mechanisms for ensuring children’s privacy. More stringent guidelines could also spark innovation, leading to the creation of safer, more secure platforms. In the end, the onus is on both companies and lawmakers to ensure that the next generation of digital natives can enjoy the benefits of technology without sacrificing their safety or privacy.