Had you asked yesterday, we would have said the largest financial remedy for violations of the Children’s Online Privacy Protection Act Rule was $5.7 million. Today’s $170 million total monetary judgment against YouTube and its parent company Google raises the stakes when it comes to COPPA compliance. Filed jointly with the New York Attorney General’s Office, the record-breaking FTC settlement offers three primary takeaways for other companies.
How popular is YouTube with children under 13? The answer YouTube gave depended on who was asking. When pitching its platform to companies selling kid-related products, YouTube described itself as “today’s leader in reaching children age 6-11 against top TV channels” and “the #1 source where children discover new toys + games.” YouTube also touted that it “was unanimously voted as the favorite website for kids 2-12” and that “93% of tweens visit YouTube to watch videos.” Many parents wouldn’t be surprised by that description.
But when an advertiser raised the issue of COPPA, a Google employee said this: “[W]e don’t have users that are below 13 on YouTube and platform/site is general audience, so there is no channel/content that is child-directed and no COPPA compliance is needed.” That statement would likely raise parental eyebrows. And it gets to the heart of where the FTC and the New York AG say YouTube violated COPPA.
Individuals and businesses that upload videos to YouTube can create channels to display their content. Of course, companies want viewers to watch what they’ve uploaded, but YouTube offers another way for businesses to make money through their channels. By default, YouTube enables behavioral advertising (also known as targeted advertising) on monetized channels. That means YouTube collects information about viewers of content in the form of persistent identifiers – for example, cookies that allow YouTube to track viewers over time and across websites – and uses that data to serve them tailored ads. The channel owner makes money from the advertiser and so does YouTube.
YouTube used that money-making model across its platform. That included channels geared to a general audience, but also channels YouTube knew were geared toward kids under 13. How did YouTube know? In some instances, channel owners told YouTube their content was directed to children. In other cases, YouTube’s own rating system identified content as kid-directed. And yet even with that knowledge, YouTube used persistent identifiers on channels directed to children – identifiers that allowed YouTube to track kids online, deliver them targeted ads, and make millions in the process.
Beginning in January 2016, YouTube offered channel owners the option to disable behavioral advertising and instead use contextual ads, a less precise method of anticipating ads to which a viewer might respond. But YouTube cautioned channel owners that turning off behavioral ads “may significantly reduce [the] channel’s revenue.” The unspoken concern was that it also would reduce how much money YouTube would make.
Congress enacted COPPA to make it clear that parents – not marketers – are in charge when it comes to whether companies can collect information from kids online. The FTC and the New York AG allege that YouTube’s behind-the-scenes conduct violated three key COPPA provisions.
First, under the COPPA Rule, a child-directed website or online service – or a site that has actual knowledge it’s collecting or maintaining personal information from a child – must give clear notice on its site of “what information it collects from children, how it uses such information, and its disclosure practices for such information.” Second, the site or service must give direct notice to parents of their practices “with regard to the collection, use, or disclosure of personal information from children.” Third, before collecting personal information from kids under 13, COPPA-covered companies must get verifiable parental consent. COPPA’s definition of “personal information” specifically includes persistent identifiers used for behavioral advertising. Importantly, third-party platforms are subject to COPPA when they have actual knowledge they’re collecting personal information from users of a kid-directed site. Therefore, the complaint charges that YouTube knew certain channels on its platform were directed to children and yet tracked visitors to those sites without disclosing that practice and without getting parents’ verifiable consent.
In addition to the $170 million judgment – which goes to the U.S. Treasury and the State of New York – the proposed settlement requires YouTube and parent company Google to notify channel owners that their child-directed content may be subject to the COPPA Rule. YouTube and Google also must implement and maintain a system that lets channel owners identify content as child-directed so YouTube can ensure it’s complying with COPPA. In addition, YouTube and Google must provide annual COPPA compliance training for employees who deal with channel owners.
What tips can other companies take from the settlement?
Content creators need to be conversant with COPPA. Do you upload child-directed content to platforms like YouTube for commercial purposes? The COPPA Rule may apply if you allow the collection of personal information from viewers of your content. That includes the collection of persistent identifiers used for behavioral advertising.
A warning to platforms: Actual knowledge that content is kid-directed kicks in COPPA obligations. If a platform hosting third-party content knows that content is directed to children, it’s illegal to collect personal information from viewers without getting verifiable parental consent.
Like real estate, a website can be “mixed use.” It’s fine for most commercial sites geared to a general audience to include a corner for kids. But if that part of your site collects information from users, you now have obligations under COPPA.
Check the Business Center’s COPPA portal for compliance resources.
It is your choice whether to submit a comment. If you do, you must create a user name, or we will not post your comment. The Federal Trade Commission Act authorizes this information collection for purposes of managing online comments. Comments and user names are part of the Federal Trade Commission’s (FTC) public records system, and user names also are part of the FTC’s computer user records system. We may routinely use these records as described in the FTC’s Privacy Act system notices. For more information on how the FTC handles information that we collect, please read our privacy policy.
The purpose of this blog and its comments section is to inform readers about Federal Trade Commission activity, and share information to help them avoid, report, and recover from fraud, scams, and bad business practices. Your thoughts, ideas, and concerns are welcome, and we encourage comments. But keep in mind, this is a moderated blog. We review all comments before they are posted, and we won’t post comments that don’t comply with our commenting policy. We expect commenters to treat each other and the blog writers with respect.
We don't edit comments to remove objectionable content, so please ensure that your comment contains none of the above. The comments posted on this blog become part of the public domain. To protect your privacy and the privacy of other people, please do not include personal information. Opinions in comments that appear in this blog belong to the individuals who expressed them. They do not belong to or represent views of the Federal Trade Commission.
In reply to Good by Jayce
In reply to Good by Jayce
In reply to Good by Jayce
In reply to As a parent and a youtube by Guest
The Business Center’s COPPA portal provides compliance resources.
In reply to The Business Center’s COPPA by FTC Staff
In reply to From what i understand in the by Sakono
Get more information in this new FTC blog: YouTube channel owners: Is your content directed to children?
In reply to The Business Center’s COPPA by FTC Staff
In reply to That doesn’t really mean by Guest
In reply to ^ ya. I watch many youtubers by Alex Arrieta
In reply to There is a very large by Guest
In reply to I agree, I'm a YT creator who by Guest
Get more information in this new FTC blog: YouTube channel owners: Is your content directed to children?
In reply to There is a very large by Guest
In reply to This act asserts more control by Elliott
The comments you put here on the Business Blog do not go on the public record. If you want to make a comment on the public record, you have until December 9, 2019. Read about the COPPA Rule. Submit a Comment to the public record here.
In reply to Hey there, this policy will by Jack
Get more information in this new FTC blog: YouTube channel owners: Is your content directed to children?
In reply to Ironic, these new rules say by Andrew A.
Get more information in this new FTC blog: YouTube channel owners: Is your content directed to children?
In reply to The YouTube crafting by Guest
Get more information in this new FTC blog: YouTube channel owners: Is your content directed to children?
In reply to Get more information in this by FTC Staff
In reply to This is what I don't by Guest
Read about how COPPA applies to channel owners who upload their content to YouTube in this new blog from the FTC: YouTube channel owners: Is your content directed to children?
In reply to No one is clarifying anything by Guest
Get more information in this new FTC blog: YouTube channel owners: Is your content directed to children?
In reply to I'm extremely concerned as to by Guest
Get more information in this new FTC blog: YouTube channel owners: Is your content directed to children?
Pagination