Next Score View the next score

    Federal Trade Commission broadens child privacy rules

    Senator John Rockefeller (left) and Federal Trade Commission chairman Jon Leibowitz during a news conference on Capitol Hill to announce the updated privacy regulations.
    Daniel Rosenbaum/The New York Times
    Senator John Rockefeller (left) and Federal Trade Commission chairman Jon Leibowitz during a news conference on Capitol Hill to announce the updated privacy regulations.

    NEW YORK — In a move intended to give parents greater control over data collected about their children online, federal regulators on Wednesday broadened longstanding privacy safeguards covering children’s apps and websites.

    Members of the Federal Trade Commission said they had updated the provisions to keep pace with the growing use of mobile phones and tablets among children.

    The regulations also reflect innovations like voice-recognition technology, global positioning systems, and behavior-based online advertising — that is, ads tailored to an Internet user’s habits.


    Regulators had not significantly changed the original rule, based on the Children’s Online Privacy Protection Act of 1998, or COPPA, since its inception.

    Get Talking Points in your inbox:
    An afternoon recap of the day’s most important business news, delivered weekdays.
    Thank you for signing up! Sign up for more newsletters here

    That rule required operators of websites directed at children to notify parents and obtain their permission before collecting or sharing personal information — such as first and last names, phone numbers, home addresses, or e-mail addresses — from children under 13.

    Legislators who enacted that law said the intent was to give parents control over entities seeking to collect information about their children so that the parents could, among other things, prevent unwanted contact by strangers.

    The new rule, unveiled at a news conference in Washington, significantly expands the types of companies required to obtain parental permission before knowingly collecting personal details from children, as well as the types of information that will require parental consent to collect.

    Jon D. Leibowitz, the chairman of the FTC, described the rule revision as a major advance for children’s privacy.


    ‘‘Congress enacted COPPA in the desktop era and we live in an era of smartphones and mobile marketing,’’ Leibowitz said. ‘‘This is a landmark update of a seminal piece of legislation.’’

    The new rule expands the definition of personal information to include persistent IDs — such as a customer code number, the unique serial number on a mobile phone, or the IP address of a browser — if they are used to show a child behavior-based ads.

    It also requires third parties like ad networks and social networks that know they are operating on children’s sites or apps to notify and obtain consent from parents before collecting such personal information. And it makes children’s sites or apps responsible for notifying parents about data collection by third parties integrated into their services.

    Collecting data to show children contextual ads based on the content of a site or app, however, will not require parental consent.

    “The only limit we place is on behavioral advertising,’’ Leibowitz said. ‘‘Until and unless you get parental consent, you may not track children to create massive profiles’’ for behavior-based ads.


    Stuart P. Ingis, a lawyer representing several marketing associations, said that reputable online marketers did not knowingly profile children to show them behavior-based ads. He added that industry guidelines prohibited the practice.