The Federal Trade Commission has released additional guidance on how the Children’s Online Privacy Protection Rule applies to the collection of audio voice recordings.
The law requires designated operators of commercial websites or online services to obtain parental consent before collecting personal information from children under 13.
The FTC updated the COPPA Rule in 2013, adding several new types of data to the definition of personal information, including a photograph, video or audio file that contains a child’s image or voice, to data already covered, such as a name, address or Social Security number. This update has prompted some questions about the application of this requirement when a child’s voice is collected for the sole purpose of instructing a command or request.
In a new policy enforcement statement, the FTC noted that the COPPA rule requires websites and online services directed at children to obtain verifiable parental consent before collecting an audio recording. The Commission, however, recognizes the value of using voice as a replacement for written words in performing search and other functions on Internet-connected devices.
The agency will not take an enforcement action against an operator for not obtaining parental consent before collecting the audio file with a child’s voice when it is collected solely as a replacement of written words, such as to perform a search or to fulfill a verbal instruction or request, as long as it is held for a brief time and only for that purpose.
The FTC has actively enforced the COPPA Rule, bringing more than two dozen cases since it was first issued in 2000. Most recently, the FTC reached settlements with a mobile advertiser that deceptively tracked the locations of children without parental consent and against two app developers that allowed third-party advertisers to collect information about children without parental consent.