Disney Will Pay $10m For Illegally Collecting Personal Data Of Children

Disney will pay $10 million to settle claims by the US Federal Trade Commission (FTC) that it mislabeled videos for children on YouTube, which allowed the collection of kids' personal information without their consent or notification to their parents.

The US Department of Justice (DoJ) has determined that Disney broke the Children’s Online Privacy Protection Rule (COPPA) by neglecting to label a “significant number” of videos it places on YouTube as “Made for Kids.” 

Targeted advertising is disabled on videos designated as intended for children. Disney’s actions allowed the children to be subjected to targeted advertising based on personal data collected without parental notice or consent, the initial complaint says.  

The agency’s proposed order will require changes to how Disney designates videos directed to children on the streaming service and will push YouTube to begin using age assurance technologies, according to the  FTC said. The COPPA Rule was updated in January to require parents to opt in to third-party advertising to children.

The rule mandates that websites and online services get verifiable parental consent before collecting, using, or sharing personal information from children under age 13. 

Disney has uploaded tens of thousands of videos to more than 1,250 YouTube channels since 2020, according to the complaint. Those posted to just three dozen Disney channels drew 1.2 billion views in the US over a three-month period of 2020 alone.  Many of these videos were not properly labeled as being for children. The entertainment giant profited handsomely from the practice, the complaint says. 

Disney receives part of YouTube’s advertising revenue from promotions placed on the videos. It also places its own ads on a subset of videos. 

In November 2019, YouTube told Disney it was required to alert it if content uploaded was directed at children to ensure it was complying with COPPA. YouTube determined what advertising practices would be allowed depending on whether or not Disney labeled it as content made for children.  Videos posted by Disney with a “Not Made for Kids” label included clips of Mickey Mouse cartoons and snippets from child-directed movies such as Frozen, Encanto, Moana, Cars, Tangled, Ratatouille and Toy Story, the complaint says. 

YouTube told Disney that it was failing to label the videos correctly as early as June 2020, the complaint says, but apparently Disney failed to fix the problem. “This case underscores the FTC’s commitment to enforcing COPPA, which was enacted by Congress to ensure that parents, not companies like Disney, make decisions about the collection and use of their children’s personal information online,” FTC Chairman Andrew Ferguson said in a prepared statement. 

In addition to the $10 million fine, the proposed settlement requires Disney to begin alerting parents before collecting personal data from children under age 13 and obtain their consent in accordance with COPPA. Disney is also required to start a program to ensure that videos it uploads to YouTube are properly designated as intended for kids. 

FTC  |  FTC  |  DoJ  |   The Record  |   Bleeping Computer  |  Reuters  

Image: Bo-Shou

You Might Also Read: 

Teach Your Children About Safer Cyber Security:

If you like this website and use the comprehensive 8,000-plus service supplier Directory, you can get unrestricted access, including the exclusive in-depth Directors Report series, by signing up for a Premium Subscription.

• Individual £5 per month or £50 per year. Sign Up

• Multi-User, Corporate & Library Accounts Available on Request

• Inquiries: Contact Cyber Security Intelligence     

Cyber Security Intelligence: Captured Organised & Accessible