Five lessons from the report showing thousands of Google Play kids’ apps are in breach of COPPA

An academic study published this week reveals that thousands of kids’ apps are collecting and transmitting personal information to third parties, in possible breach of COPPA (and soon, GDPR-K).  The research from academics at the University of California at Berkeley is the most comprehensive ever done to assess the data collection and sharing practices of the most popular kids’ games and apps, and the results were covered in The Guardian and elsewhere. It demonstrates how hard it is to comply with COPPA using existing ad technology built for the adult market, vs kidtech that is based on zero-data collection.  And it usefully highlights the lack of common frameworks and standards between the regulators, the app stores and developers. Read More

The GDPR-K Toolkit for Kids Publishers Part Six: Obtaining verifiable parental consent

Europe’s new data privacy law, the General Data Protection Regulation (GDPR), will be enforced from May 2018.  This law obliges all companies with consumers based in the EU to enable new data privacy protection. For websites and apps whose audience is primarily kids, additional requirements apply, commonly known as GDPR-Kids (GDPR-K). Part Six of our comprehensive GDPR-K Toolkit covers collecting data and obtaining verifiable parental consent. Read More

The GDPR-K Toolkit for Kids Publishers Part Five: Kid-safe user acquisition

Europe’s new data privacy law, the General Data Protection Regulation (GDPR), will be enforced from May 2018.  This law obliges all companies with consumers based in the EU to enable new data privacy protection. For websites and apps whose audience is primarily kids, additional requirements apply, commonly known as GDPR-Kids (GDPR-K). Part Five of our comprehensive GDPR-K Toolkit covers acquiring new users and leveraging cross-promotion. Read More

The GDPR-K Toolkit for Kids Publishers Part Four: Safely monetise your site or app

Europe’s new data privacy law, the General Data Protection Regulation (GDPR), will be enforced from May 2018.  This law obliges all companies with consumers based in the EU to enable new data privacy protection. For websites and apps whose audience is primarily kids, additional requirements apply, commonly known as GDPR-Kids (GDPR-K). So far, we have covered auditing your technology partners, defining your audience and revising your policy notices. Now that you’ve covered the basics of compliance, we can look at how to maximise advertising revenue from your kids audience. Read More

The GDPR-K Toolkit for Kids Publishers Part Three: Revise your privacy notices

Europe’s new data privacy law, the General Data Protection Regulation (GDPR), will be enforced from May 2018.  This law obliges all companies with consumers based in the EU to enable new data privacy protection. For websites and apps whose audience is primarily kids, additional requirements apply, commonly known as GDPR-Kids (GDPR-K). In this series we outline the steps you ought to take immediately to prepare for GDPR-K. Part One dealt with auditing your technology partners. Part Two dealt with defining and articulating your compliance strategy. Part Three covers how best to revise your privacy notices. Once you have regained control over the data collection that happens on your site or app (Part One), and have determined ‘who you are’ under GDPR-K (Part Two), it’s time to rewrite your terms of service and privacy policies. Read More

The GDPR-K Toolkit for Kids Publishers Part Two: Defining your audience

Europe’s new data privacy law, the General Data Protection Regulation (GDPR), will be enforced from May 2018.  This law obliges all companies with consumers based in the EU to enable new data privacy protection. For websites and apps whose audience is primarily kids, additional requirements apply, commonly known as GDPR-Kids (GDPR-K). In this series we outline the steps you ought to take immediately to prepare for GDPR-K. Part One dealt with auditing your technology partners. Part Two deals with defining and articulating your compliance strategy. Read More

10 things developers should know about building digital services for kids

Two years ago we launched Kids Web Services (KWS), a platform to help developers build COPPA-compliant apps and sites for the under-13 audience. As similar data privacy laws have expanded into Europe, building engagement for the kids audience has become a challenge which many brands, content owners and game developers hadn’t planned for. Read More