Disney Settles $10 Million FTC Case Over COPPA Violations

Disney has recently come to terms with the U.S. Federal Trade Commission (FTC) in a significant settlement amounting to $10 million. This agreement stems from violations of the Children’s Online Privacy Protection Act (COPPA), where Disney mislabeled certain YouTube videos as “not made for kids.” This mislabeling enabled the collection of personal data from children under the age of 13 without obtaining the necessary parental consent.

Mislabeling of Content

The FTC’s investigation revealed that several popular YouTube videos from Disney franchises like Frozen, Toy Story, and The Incredibles were incorrectly marked. This misclassification occurred because Disney relied on default settings at the channel level instead of individually selecting the appropriate audience category for each video. As a result, many pieces of content that were clearly aimed at children were wrongly categorized, allowing data collection and targeted advertising in direct violation of federal law.

Ongoing Oversight Issues

Interestingly, the situation didn’t arise from mere oversight. Back in mid-2020, YouTube flagged over 300 of these misclassified videos and changed their settings to reflect they were “made for kids.” Despite this alert, Disney continued to maintain the default settings across their channels, meaning that any new videos uploaded would automatically carry the incorrect labeling. This practice was particularly concerning on channels like Disney Junior and Pixar Cars, which are explicitly designed for younger audiences.

The FTC’s complaint highlights that the consequences of this mislabeling were significant. Young viewers were exposed to features restricted for children, such as autoplay and personalized ads. Disney has reportedly utilized these default settings without thorough oversight or individual review, raising serious questions about their commitment to children’s privacy.

Implications of the Settlement

While the $10 million settlement is noteworthy, it represents more than just a financial penalty for Disney. As part of the agreement, Disney is now mandated to comply with legal requirements, which include notifying parents before collecting any data from their children and obtaining their permission. This requirement aims to reinforce the message that consent is vital before any data collection activities.

Moreover, Disney must establish a comprehensive review system for all of their YouTube content. This measure will only be lifted if YouTube implements “age assurance technology” capable of determining the viewer’s age in real time. This technology serves as an automatic safeguard against improper data collection, suggesting a shift toward a more responsible digital environment.

A Shift in Child Privacy Protections

FTC Chairman Andrew Ferguson underscored the importance of this case, emphasizing that it highlights the misuse of parental trust in corporate practices. However, the implications extend beyond Disney; they reflect a broader issue concerning the treatment of children’s privacy online. The COPPA, enacted in 1998, was initially designed to combat concerns like children sharing personal information in chat rooms. In today’s landscape, where behavioral tracking and complex data profiling are prevalent, the protections afforded by this legislation are being tested.

This settlement marks the first instance of a COPPA-related case against a YouTube content provider rather than the platform itself, following the $170 million agreement between YouTube and Google in 2019. It signals that even well-established companies must strictly adhere to privacy regulations, especially if their targeted audience includes children.

Looking Ahead

Moving forward, the required changes from this settlement should lead to better labeling of Disney’s videos, providing enhanced privacy protections for children accessing Disney content on YouTube. However, parents should remain vigilant and cannot solely depend on corporations—regardless of their reputation—to act in the best interest of their children when profits are at stake.

This case serves as a crucial reminder of the evolving challenges facing online child safety and the continuous need for vigilant enforcement of privacy laws.

Related Reads:

• Disney Data Breach Fears: Hackers Threaten Leak of Unreleased Projects