Three Web Sites Fined
For Violating Children's Privacy

April 19, 2001

• Sony BMG to Pay $1 Million for Violating Children's Privacy • Texas Reins in Santa.com • Texas Sues Kids' Web Sites • Xanga.com Fined for Children's Privacy Violations • FTC "Concerned" About MySpace & Other Networking Sites • Hershey, Mrs. Fields Fined for Violating Children's Online Privacy • Jolly Time Web Site Fined $10,000 for Violating Children's Privacy • Three Web Sites Fined For Violating Children's Privacy • Girls Web Site Fined $25,000 On FTC Privacy Charges

The Federal Trade Commission has announced settlements with three Web site operators for violations of the Children's Online Privacy Protection Rule (COPPA Rule). The FTC charged that girlslife.com; bigmailbox.com and insidetheweb.com illegally collected personal information from children under 13 years of age without parental consent.

The companies together will pay a total of $100,000 in civil penalties for their COPPA violations. In addition to the requirement that these companies comply with COPPA in connection with any future online collection of personally identifying information from children under 13, the settlements require the operators to delete all personally identifying information collected from children online at any time since the Rule's effective date. These cases mark the first civil penalty cases the FTC has brought under the COPPA Rule.

The Children's Online Privacy Protection Act became effective on April 21, 2000. The Act applies to operators of commercial Web sites and online services directed to children under 13, and to general audience sites that knowingly collect personal information from children. The Rule requires that Web sites post a complete privacy policy, and directly notify parents of their information collection practices and get verifiable parental consent before they collect children's personal information or share that information with others. In the year since the COPPA became effective, the FTC has undertaken an extensive campaign to educate web businesses about the Rule's requirements, including publishing business guidelines and hosting compliance seminars. In July 2000, the FTC followed up by sending e-mails to scores of children's Web sites to alert them to COPPA's requirements for Web sites collecting personally identifiable information from children under 13.

Pointing to a study showing that 91 percent of children's Web sites now post a privacy policy compared to just 24 percent in 1998, Jodie Bernstein, Director of the FTC's Bureau of Consumer Protection said, "The Children's Online Privacy Protection Act was enacted with the support of both industry and consumer groups to ensure that parents have a say in what information is collected from their children. We're encouraged by the progress industry has made in the past year in complying with COPPA, and as the cases announced today demonstrate, we intend to take enforcement action against those who don't."

The Girlslife.com Web site targets girls aged 9 to 14, offering features such as online articles and advice columns, contests, and pen-pal opportunities. Partnering with BigMailbox.com and Looksmart Ltd., it also offered children free e-mail accounts and online message boards. The FTC alleged that each of the defendants collected personal information from children, including such things as full name and home address, e-mail addresses and telephone numbers. None of the Web sites posted privacy policies that complied with the Act or obtained the required consent from parents prior to the collection of their children's personally identifiable information, as required by COPPA. In addition, the BigMailbox privacy policy falsely claimed, among other things, that children under 13 years old could not open an e-mail account without prior parental consent.

The Web sites collected children's personal information for their own internal uses, enabled children to publicly reveal their personal information online without first obtaining parental consent, and, in the case of BigMailbox, provided children's personal information to third parties without prior parental consent. The FTC also charged that all three operators required children to disclose more personal information than was needed for participation in the activities involved, a practice that also violates COPPA.

Settlement of the cases will require each of the sites to delete all personal information collected from children since COPPA became effective. The settlements will bar future violations of COPPA and require that, in addition to posting a privacy policy that complies with the law, the sites link to the FTC site at www.ftc.gov/kidzprivacy, where consumers can find helpful information about COPPA. The BigMailbox settlement also bars the company from making deceptive claims in its privacy policy. Finally, Girlslife will pay a civil penalty of $30,000 and BigMailbox and Looksmart each will pay civil penalties in the amount of $35,000.

In a related matter, the FTC announced that the Entertainment Software Rating Board (ESRB) has been approved as a "safe harbor" program under the terms of COPPA. Safe harbor programs are industry self-regulatory guidelines that, if adhered to, are deemed to comply with the Act. This is the second safe harbor application approved by the Commission. The Children's Advertising Review Unit of the Council of Better Business Bureaus (CARU), an arm of the advertising industry's self-regulatory program won the first COPPA safe harbor approval.

Back to the top |