The Federal Trade Commission (FTC) reached a record $3 million agreement with the online game developer Playdom Inc. and Senior Vice President Howard Marks to settle charges that the Walt Disney Co. subsidiary violated the Children’s Online Privacy Protection Act of 1998 (COPPA) by collecting and disclosing the personal information of children under the age of 13 without proper parental consent.
Playdom is a developer of social games available on Facebook, MySpace, and other global social networks. Since 2006, it has allowed users to access and play games in more than 20 virtual online worlds. For example, Playdom users can create a Stone Age civilization one minute and run a virtual NBA basketball team the next. Playdom requires online registration of all users prior to entering any of Playdom’s online worlds. Although most of the online worlds are directed to a general audience, they reportedly attract children as well. One of the online worlds, Pony Stars, was specifically directed at children. As part of the registration process, Playdom required child users to provide information including an email address and birth year. If the user self-reported being less than 13 years of age, a disclaimer popped up and required entry of a parent or guardian’s email address. After entering the email address, the child was fully registered and could create an online profile that included real name, location, and email address, among other identifying information.
The FTC alleged that Playdom violated COPPA in three significant ways. First, Playdom did not provide sufficient general notice on its website of what personal information the website collected, used, and distributed. Second, Playdom did not provide direct notice to the parents of child users about the information collected. Third, Playdom did not obtain appropriate parental consent prior to collecting child user information.
The chairman of the FTC said that this settlement, the largest civil penalty for a violation of COPPA, should make it clear to operators of child-directed interactive sites that nothing short of proper parental notice and consent are required. Operators of websites directly or indirectly targeting children must be diligent in ensuring that their websites allow parents of child visitors ample opportunity to review and consent to all categories of personal information collected.
All advertisers operating websites that attract children should be aware of this FTC action and COPPA.