Some privacy and consumer advocates allege that a new Microsoft service, which is intended to help parents control the information their children give out online, actually is misleading and fails to comply with a federal law aimed at protecting children’s online privacy. They have asked the Federal Trade Commission (FTC) to investigate.
Microsoft denies the allegations and responds that some of the groups’ complaints basically amount to nit-picking.
The Electronic Privacy Information Center, along with the Center for Media Education and 11 other organizations, filed supplemental materials in support of a pending complaint with the FTC Aug. 15.
COPPA also requires web sites to obtain “verifiable parental consent” before collecting, using, or disclosing any personal information, such as names or addresses, from children under 13.
“We’re calling on the Federal Trade Commission to confirm whether the Microsoft Kids Passport complies with COPPA,” said Gabriela Schneider, senior policy analyst at the Center for Media Education.
Kids Passport is a version of Microsoft’s Passport technology, an online service that lets users create a single profileincluding username, password, and other informationthat can be used on all participating web sites. The service’s goal is to make web-surfing and internet shopping easy for consumers.
According to the Microsoft Passport web site, “Kids Passport helps protect and control online privacy for children by obtaining parental consent to collect or disclose a child’s personal information” from one convenient, centralized location.
Parents can use Kids Passport as a tool to permit participating web sitessuch as Hotmail.com or Athlete.comto collect or disclose personally identifying information about their children.
When a child tries to sign on to a web site that requires personally identifying information, the child can ask a parent or guardian for permission by sending an electronic request through Kids Passport. The parent or guardian reviews the request and can grant a specific level of consent or deny consent altogether.
Microsoft’s Kids Passport appears to meet most of COPPA’s requirements, but privacy advocates and education organizations are concerned it doesn’t meet them all.
“Microsoft is promoting its Kids Passport to parents as a service that will protect their kids’ privacy, when in fact it doesn’t appear to comply with the law,” Schneider said. “It’s misleading to parents.”
But under COPPA, Schneider said, “there should be one [privacy] policy that outlines all of the details” if there is a single form that allows parents to sign their consent.
A Microsoft representative told eSchool News, “Kids Passport is only a mechanism to help parents with parental control. Should Kids Passport be the one to govern the privacy policies of all these sites? Microsoft never positioned it to be that.”
“They are disregarding the law, and that’s pretty egregious,” Schneider contended. “The law was passed to protect children under 13, and they are not complying with that law.”
Microsoft Passport is not mandatory for users, but it is one of the foundation services of the Microsoft .NET initiative, which aims in the future to offer personalized experiences to users anytime, anywhere, from any device.
Currently, the Microsoft Kids Passport requires a child’s birth date, sign-in name, password, password-reset question, eMail address, country, state, and region. Microsoft stores the personal information on its secure server.
Parents can choose how much of their child’s personal information Microsoft can share with Passport-participating web sites.
“Microsoft is saying, ‘Sign up here for your child if you would like to have full, medium, or all information collected on the child,'” Schneider said.
The Center for Media Education and other privacy groups want the FTC, and Microsoft, to review Microsoft’s policies and practices to see if they comply with COPPA.
“The law is only as effective as its enforcement,” Schneider said. If the FTC does not investigate this, it would set a dangerous precedent that might undermine the goal of protecting children’s privacy in the online environment, she added.
Center for Media Education
Microsoft Kids Passport