TikTok is still collecting children’s personal data without parental consent, privacy advocates wrote the FTC Thursday, demanding an investigation. The Campaign for a Commercial-Free Childhood, Center for Digital Democracy and some 20 organizations said TikTok is violating its 2019 order with the agency, which included a $5.7 million fine due to apparent Children’s Online Privacy Protection Act violations (see 1902270059). The company failed to delete data collected before the 2019 order and hasn’t given parents access to review or delete personal information, the groups alleged. The FTC confirmed receiving the complaint. “We take privacy seriously and are committed to helping ensure that TikTok continues to be a safe and entertaining community for our users,” emailed a spokesperson for the platform.
Cisco clarified its privacy policy for Webex videoconferencing after a Consumer Reports study on data protection (see 2005010059), CR said Tuesday. The clarification makes it easy to determine what data is collected and how it’s used, CR said. Cisco didn’t comment.
The FTC should launch an investigation of “children’s data practices in the educational technology and digital advertising sectors,” a bipartisan group of senators wrote the agency Friday. Ed Markey, D-Mass.; Josh Hawley, R-Mo.; Richard Blumenthal, D-Conn.; Bill Cassidy, R-La.; Dick Durbin, D-Ill.; and Marsha Blackburn, R-Tenn., asked the agency to use its FTC Act Section 6(b) authority to better understand industry practices as it does “an ahead-of-schedule review of the Children’s Online Privacy Protection Act Rule,” given increased tech demand due to COVID-19. Advocacy groups made the same request in April (see 2003310055). The lawmakers asked how personal data is collected, how consent is obtained and how long the data is retained. An FTC spokesperson confirmed receiving the letter.
The FTC voted 3-2 Tuesday to amend and update Facebook’s 2012 privacy order, reflecting a $5 billion settlement between the two sides in July (see 2004240052). Commissioners Rohit Chopra and Rebecca Kelly Slaughter dissented, as they did in the July settlement. U.S. District Judge Timothy Kelly for the District of Columbia entered the order Thursday, prompting a statement from Chairman Joe Simons. “The order requires Facebook to restructure its approach to privacy from the corporate board-level down,” the FTC said. It “further establishes strong new mechanisms to ensure that Facebook executives are accountable for the decisions they make about privacy.” Facebook didn't comment.
The Washington state facial recognition bill Gov. Jay Inslee (D) signed Tuesday (see 2003310051) is “a reasonable compromise among innovators, law enforcement and the privacy interests of Americans,” said CTA President Gary Shapiro Thursday. “This is a balanced model for other states and should be open to revision with experience."
A Sept. 22 FTC event will examine data portability's “potential benefits and challenges,” the agency said Tuesday. Comments are due Aug. 21. Portability gives consumers control over data and promotes competition by allowing data access to entrants, the agency said: There are security and privacy concerns, particularly for incidental data from friends.
Washington Gov. Jay Inslee (D) signed a government facial recognition bill Tuesday. The legislature passed SB-6280 earlier this month while failing to agree to a comprehensive privacy bill that included private sector facial recognition rules (see 2003130070). Sen. Joe Nguyen (D) said his bill will bring “regulatory checks and balances” to a technology that’s being used.
The FTC should compel information from technology, media and educational tech companies collecting children’s data, the Campaign for a Commercial-Free Childhood and Center for Digital Democracy wrote the agency Thursday. Citing increased video streaming due to COVID-19, the groups said the agency should target AT&T, Comcast, Google, Zoom, Disney, Viacom and edtech companies Edmodo and Prodigy. The groups suggested the agency use 6(b) authority to do a study. A 6(b) study carries subpoena authority, allowing the commission to request nonpublic information. The letter, sent by the Institute for Public Representation at Georgetown Law, pertains to the agency’s review of the Children’s Online Privacy Protection Act (see 1912120062). The commission should avoid actions “that could undermine strong protections for children’s privacy without full information about a complex data collection ecosystem,” the groups wrote. An FTC spokesperson confirmed the agency received the request.
About 20 stakeholders support privacy legislation (HR-4978) from Reps. Anna Eshoo and Zoe Lofgren (see 1911050062), the California Democrats announced Wednesday. Color of Change, the National Hispanic Media Coalition, Public Knowledge, Electronic Privacy Information Center and Open Mic were among backers.
Google is illegally collecting personal data from children through its G Suite for Education apps, alleged New Mexico Attorney General Hector Balderas (D) in a lawsuit Thursday. This includes geolocation information, browsing history, search terms, contact lists and voice recordings, Balderas said: “Tracking student data without parental consent is not only illegal, it is dangerous.” Balderas’ claims are factually wrong, a company spokesperson said. The apps require parental consent when necessary and allow schools to control account access, Google said: “School districts can decide how best to use Google for Education.”