Skip to main content

CARU's Recommends Checking Privacy Policies Twice Before Allowing Kids on Santa Websites



More than 60 domain names have been registered in the name of Santa Claus, offering children a wide range of opportunities to persuade St. Nick via email that they were not at all naughty in 2010.

Before allowing children to share any personal information with a “Letter to Santa” Website,however, the Children’s Advertising Review Unit (CARU) recommends that adults carefully review such sites to determine who is seeking the information, how it will be used and whether it will be shared with third parties.

“Even Santa is required to comply with CARU’s Online Privacy Protection guidelines and the federal Children’s Online Privacy Protection Act,” said Wayne J. Keeley, CARU’s director. All Websites directed to children – or Websites designed with a special children’s section –should have a privacy policy that explains the site’s information collection practices. The privacy policy should include the name of the company and the company’s complete contact information. It should also state whether the company shares information with third parties, including advertisers, and whether the company publically discloses the information or retains the information for any future purpose.

CARU offers the following ‘Dear Santa’ site review tips:
  
- Websites directed to children should not ask a child to disclose more information than is reasonably necessary to participate in the activity – a first name and email address, for instance. 

- Limit the personal information children share with Santa and omit physical addresses, Santa already knows where all the children live. 

- Check Websites for unwelcome content. Some sites are geared toward adults and may contain language or advertising adults may not want children to see. 

- Since hyperlinks can allow children to move seamlessly from one site to another, investigate the hyperlinks to assure children don’t access inappropriate content.

Popular posts from this blog

CARU Speaks at Community Board in Manhattan

CARU staff attorney Andra Dallas gave a presentation to Community Board 1, serving lower Manhattan on Monday, December 7 th .  Andra spoke to the Board’s Youth Committee about the importance of teaching children about understanding advertising and safe online practices.  District Manager Noah Pfefferblit remarked, “thank you for your informative presentation to our Youth Committee members,” and offered the Board’s assistance if they “can be helpful to the important efforts at the Children's Advertising Review Unit.” Are you interested in having a CARU staff member visit your community board? Contact adallas@caru.bbb.org.

i-Dressup Shuts Down in Wake of Privacy Breach and COPPA Violation

I-Dressup, a fashion-themed social website for teens, has completely shut down as part of a settlement with the New Jersey Department of Consumer Affairs, following a massive privacy breach and violations of the federal Children's Online Privacy Protection Act (COPPA) and New Jersey state law. In September 2016, a hacker sent 2.2 million i-Dressup account credentials to technology blog Arstechnica as well as to haveibeenpwned.com, a searchable online database of data breaches. Responding to the news, New Jersey investigators discovered that 2,519 of the compromised accounts belonged to New Jersey children below age 13. I-Dressup, allegedly aware that it had child users, had violated COPPA by failing to obtain verifiable parental consent prior to collecting and processing personal information from the children, including first and last names and email addresses. In a consent decree with the New Jersey Attorney General Gurbir Gerwal, parent company Unixiz has closed i-Dressup,

Kids Internet Design and Safety Act Seeks to Protect Children from Harmful Online Content

United States Senators, Mr. Richard Blumenthal from Connecticut and Mr. Edward Markey from Massachusetts, introduced a new bill referred to as the Kids Internet Design and Safety Act (the “KIDS Act”). One of the Senator’s introducing the KIDS Act, Mr. Edward Markey, was the co-author of the Children’s Online Privacy Protection Act (“COPPA”). The KIDS Act seeks to include noteworthy advertising rules and create new protections for children online, specifically for online users under the age of 16. The proposed advertising rules within the KIDS Act are to ban websites from: (1) exposing young online users to advertisements “with embedded interactive elements”; (2) recommending any content involving alcohol, nicotine, or tobacco to young online users; and (3) recommending content that includes influencer marketing, like unboxing videos, or host-selling to young online users. Additionally, the KIDS Act seeks to prohibit certain online features to protect children, like prohibiting