FTC Expanding Child Data Protection Law To Biometrics / Facial Recognition
The FTC made biometrics regulations, including facial recognition, a major priority in 2023, targeting deception and unfairness in biometrics use and advertising and intervening against Rite Aid for "fail[ing] to prevent harm" with its facial recognition systems.
Now, the FTC plans to expand a child data protection law to include "biometric identifiers."
In this report, we examine the FTC's planned expansion, why physical security providers like Eagle Eye and Verkada likely fall under it as currently proposed, and how new rules impact them.
Executive *******
*** **********, ** ******* ** **, could **** * ******** ****** ** VSaaS *********, ** ** ***** ** impractical *** **** ********* ***** ******* surveillance ** ****** ******* **** ***** parent. *******, ** ******* * ******* debate ****** ***** ******* *** ***** - ***** ***** "****** ********" - will *****, ** *** ******** ** cover, ***** ************ *********. ** ********* such ** ***** ***, *******, ***. qualify ** **** ****** ********?
***** *** ******* ********* ** *** Children’s ****** ******* ********** **** (***** Rule), "*********" ** ******** ******** ******* that ******* ********** *** ******* ** the ******** - **** ***** ******* of ****** *********** - ***** **** FTC ****** ** * *****'* ********** are ********* ******* ********* ******** *******. The **** ******* "********" *******, ** "any ****** *** ******** ... ** online *******" *** *** "*** ****** knowledge **** ** ** ********** ** maintaining ******** *********** **** * *****."
*********, *** ***** **** ** ** FTC ********** ********* ****** ******** ** obtain *******' ******* ****** ********** ** dispensing ********'* "******** ***********." *** ***'* expansion ***** ******** "******** ***********" ** include "********* ***********."
*** **** *** ********** **** ***** fall ** *** *****, *** **** usually ** *** ***** **** "****** knowledge" ** ******* *** ******* *** collecting **** **** ******** ***** ** years ***. *** ********* **** ** be *****, *** - **** ** notify *** ***** ***** ******** *****, and ** ****** **** ***** **** is ******** ******* **** ******* ******* it (*** *** ******* ***** ********** against ****** ** *** **** *** failing ** ** **).
**********
***********’* ****** ******* ********** **** (***** Rule)** ** *** *** ********* "*********" of "****** ********" ** ****** ******* and ****** ******* **** ********** "******** information" **** ********, *** ** **** collecting ** "**********[***]" **** *********** **** parents' *******.
***** ******* "********" *******, ** "*** ****** *** ******** ... ** ****** *******" *** ********/********* children's ******** ***********:
*** ****** *** ******** * *** site ******* ** *** ******** ** an ****** ******* *** *** ******** or ********* ******** *********** **** ** about *** ***** ** ** ******** to **** *** **** ** ****** service
*** ******* ******* "******** ***********" ********* ******* ****, *******, ******, ******, geolocation ****, ****** ******** ******, *** other *********** ****.
***** ******* **** **** (*) ******** are ***** ** ***** *** *** (b) ** ****** ******* ** "******** to ********"***** "****** ********* **** ** ** collecting ** *********** ******** *********** **** a *****." *** ****** ********* **** not ***** ** *******, ** **** are *** "******** ** ********." *** VSaaSes **** ******** **** ********* **** they *** ********** ***********, **** ** facial ***********, **** ********.
FTC ******** ********* ***** ** ******* ********* ***********
** ******** ****, ****** ****** * ****** ** ******** rule-making(****), ******* *** ******* ******** ******* to *****. *** ** ** ****** the ********** ** "******** ***********" ** include "********* ***********," *********:
************ ** **********; ****** *** **** patterns; ******* ****, ********* * *** sequence; ** **** ******* **** ***** data, **** ****, ** ****** ****
Physical ******** ******* **** ******** ************ **** ****** ** ********
******** ******** ******* **** (*) ******* to *** ********, (*) ******* **********, and (*) **** **** **** *** collecting **** **** ******** ***** *** 13 ****** **** ***** *** ***** expansion.
** *********, *****'* ********** ** "********" is *****, *** ******** "*** ****** who ******** ... ** ****** *******." A*** ***** ********** ********** **** "*** ******* ... **** connects ** *** ********" *********:
*** **** “****** *******” ******* ****** any ******* ********* **** *** ********, or **** ******** ** *** ******** or * ****-**** *******.
***** **** ********,***********-********* ****** **** ********* ******** ********* information **** ******** ***** ** ***** old **** ****** ******* ***** *** new *****. ******** ** ******** ******** systems **** *** ** ******** ******* VSaaS ********* ***** ****** ***********.
FTC *******
** ***** *** *** ** ******* whether *** ********* ******* ** ******** security ********* ***** ********** **** ****** recognition. ** ********, *** *** ****:
*** ***** **** ******* ** ********* of ******** ** ****** ******** ******** to ******** ***** ** *** ** operators ** ******** ** ****** ******** that **** ****** ********* **** **** are ********** ******** *********** ****** **** a ***** ***** **. *** *** has ********** ***** **** *** **** “online *******” ******* ****** *** ******* available **** *** ********, ** **** connects ** *** ******** ** * wide-area *******.
*** ****** ****** ** ******** ********** notes *** **********’* ******** ** ****** the “******** ***********” ********** ** ******* “[a] ********* ********** **** *** ** used *** *** ********* ** ************* recognition ** ** **********, ********* ************ or **********; ****** *** **** ********; genetic ****, ********* * *** ********; or **** ******* **** ***** ****, gait ****, ** ****** ****.”The ******** ***** **** ***** ********* *** ******** ** * ****** *********** ****** ** *** ****** *** ******** ******** **** ***********, *** *** ********’* ******* ** ****** ******* ** ******** ** ******** ** *** ******** *** ****** ********* **** **** *** ********** ******** *********** **** * ***** ***** **. [******** *****]
*** ********* *** *** ******* *** specific ******* ***** ******** ******** *********. Still, ** *** ******** **** *** FTC ******** **** ***** "***** *********" any ******** ** * ********* ****** "to *** ****** *** ******** ******** such [*********] ***********, *** *** ... operator *** ****** ********* **** **** are ********** ******** *********** **** * child ***** **" - ********* ***** operating ******** ******** *******.
***********, *** *** *** *** *** that ******** ******** ********* *** ******. As *********, *** **** ** *** law **** ****** ****** *** *** to ******* ***** ******* ******** ******** systems **** (*) ******* ** *** internet ** * ****-**** *******, (*) collect **********, *** (*) **** ** operator *** ***** **** *** ****** is ********** **** **** ******** ***** 13 ***** ***. ******** ******* **** be ***** ** *** ***** ********* and **** *********** ********** ********.
VSaaS ******** **** ***** *** *** *******
***** ********* *** ************ ********* ****** recognition, *.*.,***** *** *** ******* ***** ** Redefine ****** ***********, ********** ********** ****** *** ****** *********** Is ****** ***********.
****, ****** ************ **-**** *******, ***** Eye, *******, *** ****** *** ******* connected ** *** ********, **** * website, ***. ***** ******* *** ********* used ** ******* *** ****** ****** where ******** *** *******, *** ** would ** ********** *** **** ** get ******** ******* *** *** ******* children **** *** **** ******* ***** locations.
Exempt *****?
***** *** ******** ********** **** *** explicitly ****** ********/************ ********, * **** for **** ********* *** *****. ****** Instagram ** ******, ***** ******* ***** and ********** ** **** ****** ********, VSaaSes *** ********** ****** ******** **** only ***** ***** ** * *** users, ********* ************** ** ***** **********, law ***********, ***.
** *** ***** ****, *** *** may ******, ** ************ *** *******, that ********** ******** **** ****** ***** biometrics ********* ******* ******* ** ** important ****** ***** ** ****** ** a ******* ********, **** *** ************ / ******** *******.
Onus *** ********** **** ******* ** ** *** *****, *** ********* ****** **** ****
******** ****** *** ******** **** ***** will ***** **** ** *** *****. As *****, *** * ****** ** qualify ***** *****, ********* **** **** "actual ********* **** [*** ******] ** collecting ** *********** ******** *********** **** a *****." * ******** ****** *** action ***** ***** ***** ***** **** it *** ** "****** *********" ** the ******'* *** **** ****. ** is *** * ********'* ************** ** monitor ** ******** *** ********* *** systems. ***** ** ********* *** *** FTC ** ****** *** ***** ****** than ********* *** ******** ********** ***. In * ***** ******** **** ********, the ********** **** ***** ***** **** *** to **** ***** ****** *********** ***** the ***** "****** ** ********* ********** procedures *** ******* **** ** *********."
********* ** **** **** ********** ****, too. ****** ********** ******* ****** ** *** 2023*** "****[***] ** ****** *******" ***** promising ******* **** **** ***** ****** their ********'* ***** ********** *** *********** data **** ***** ******* **** ****** was, ** ****, ********* **** ** the **** ** "**** ******* *** Alexa *********." ********* **** ** ****** that ***** **** **, ** ****, deleted **** ******* ******* ** - otherwise, **** ***** **** *** ******.
********* ****** **** *********** ********** **** the ********* ** **** **** *** inform *** ***** ***** ******** ************ on ***. **** *** ***** *** not ** ******** **** *** ***** expansion, *** ** ** *** **** business ******** ** **** * ****** that * ******** *** *************** *** illegally.
Protest ********
** ****** **** ******** *** ************ organizations ** ******* ***** ******** ***** and **** *** * *****-*** *** such ********.