Author |
Topic |
AdamC
Starting Member
9 Posts |
Posted - 13 May 2003 : 15:29:27
|
What I'm looking for is a way to take the information that a user inputs into the date of birth field when registering and check it to see if they are under 13 years old. If they are what I would like to have happen is they are taken to a separate administrator designed page that would tell the user to get their parents to contact us before they are allowed to register. That would make Snitz forums compliant with COPPA The Children's Online Privacy Protection Rule. In brief COPPA states that if you have a web site with content for children under 13 years of age you have to get parents permission before they can have access to your site. For a more detailed description you can go to: http://www.ftc.gov/bcp/conline/pubs/buspubs/coppa.htm
Thanks
Adam adamc@yourturnproducts.com
|
Edited by - Nikkol on 14 May 2003 19:59:18 |
|
Nikkol
Forum Moderator
USA
6907 Posts |
Posted - 13 May 2003 : 15:41:24
|
Can't you just make sure the policy page specifies that their parents must provide permission by emailing you before their account will be approved? I would think that would be COPPA compliant. |
Nikkol ~ Help Us Help You | ReadMe | 3.4.03 fixes | security fixes ~ |
|
|
AdamC
Starting Member
9 Posts |
Posted - 13 May 2003 : 17:19:05
|
We can and we do that. But because when you really get down to it there is no way to really tell if the person on the other end is lying or not we have to take further steps. The direct quote from the federal trade commission web site is, "...[the web site runners] must make reasonable efforts (taking into consideration available technology) to ensure that before personal information is collected from a child, a parent of the child receives notice of the operator's information practices and consents to those practices." While just stating that on our policy page would be in accordance with COPPA it may not be enough. Because the law doesn’t state exactly what "reasonable efforts" are it becomes a CYA situation. The more we (and Snitz forums for that matter) can do, the closer we come to following the law.
Thanks
Adam adamc@yourturnproducts.com
|
|
|
Nikkol
Forum Moderator
USA
6907 Posts |
Posted - 13 May 2003 : 17:25:18
|
quote: Originally posted by AdamC
before personal information is collected from a child, a parent of the child receives notice of the operator's information practices and consents to those practices
But that would include asking for their birthdate. |
Nikkol ~ Help Us Help You | ReadMe | 3.4.03 fixes | security fixes ~ |
|
|
Mr Pink
Junior Member
United Kingdom
387 Posts |
Posted - 13 May 2003 : 17:40:34
|
Is this a US requirement? and does this apply to web sites based in the UK? I've done a quick search on the net and can't find anything outside of the US. Maybe non US hosted sites need some advice to avoid any possible breaches of other countries childrens laws. |
Martin Leyland Forum Leyland Lancashire UK |
|
|
Banned
Starting Member
39 Posts |
Posted - 13 May 2003 : 17:43:52
|
Can you ban them altogether! |
|
|
Nikkol
Forum Moderator
USA
6907 Posts |
|
Banned
Starting Member
39 Posts |
Posted - 13 May 2003 : 17:47:42
|
That's funny - That's what i wanted to know. |
|
|
Nikkol
Forum Moderator
USA
6907 Posts |
Posted - 13 May 2003 : 17:50:12
|
You can't ... unless you restrict registration and somehow verify age. But even at that, Adam's point is that by registering, they are providing info that is against COPPA. |
Nikkol ~ Help Us Help You | ReadMe | 3.4.03 fixes | security fixes ~ |
|
|
Banned
Starting Member
39 Posts |
Posted - 13 May 2003 : 17:57:17
|
So the most you can do is say that if your under the age of ? your not allowed in? |
|
|
Nikkol
Forum Moderator
USA
6907 Posts |
Posted - 13 May 2003 : 18:00:34
|
Adam, I read the link you provided. Here are some interesting points:
quote: if you operate a general audience Web site and have actual knowledge that you are collecting personal information from children
so, if you do not ask for an age, you do not have actual knowledge.
quote: The Children's Online Privacy Protection Act and Rule apply to individually identifiable information about a child that is collected online, such as full name, home address, email address, telephone number or any other information that would allow someone to identify or contact the child. The Act and Rule also cover other types of information -- for example, hobbies, interests and information collected through cookies or other types of tracking mechanisms -- when they are tied to individually identifiable information.
So, to comply, just don't include that stuff in the profile. the only other bit of personal info is the child's email address, which is not shown. however, other's would be able to email through the forum, so you can just disable members from emailing each other. |
Nikkol ~ Help Us Help You | ReadMe | 3.4.03 fixes | security fixes ~ |
|
|
AdamC
Starting Member
9 Posts |
Posted - 13 May 2003 : 20:36:43
|
Under COPPA you are allowed to collect information such as e-mail if you are using it with the express purpose of complying with COPPA. If you find that after you talk with a parent they do not give consent you must delete all information collected. I quote from COPPA, "[Web site runners] may use email to get parental consent...]. Birthdates don't count as it doesn’t uniquely identify the child. Many people have the same birth date.
As for the users e-mail COPPA doesn’t apply to the fact that other users can or can not see it. If we (the web site runners) have a copy of it anywhere we must comply with COPPA. Blocking members from e-mailing each other has nothing to do with it.
As for just not asking for any information that COPPA covers....well we want to get that information because it pertains to our business. We sell a product marketed to children and we would like to collect such information to run contests and keep in contact with our customers.
As for not having actual knowledge, so just don't ask....that doesn’t apply if your web site is marketed to children under the age of 13. We are.
I hope this helps.
Adam adamc@yourturnproducts.com
|
|
|
AdamC
Starting Member
9 Posts |
Posted - 13 May 2003 : 20:38:15
|
quote: Originally posted by Mr Pink
Is this a US requirement? and does this apply to web sites based in the UK? I've done a quick search on the net and can't find anything outside of the US. Maybe non US hosted sites need some advice to avoid any possible breaches of other countries childrens laws.
Yes....this is a USA only law. It applies if you opperate your web site from the US. There may be similar laws in other countries though. I'd check into it. |
|
|
Nikkol
Forum Moderator
USA
6907 Posts |
Posted - 13 May 2003 : 20:46:27
|
Okay, so your web markets to kids. Then I would suggest that you restrict registration, email the person if they are under 13 and tell them that they must have their parents email you before you allow them on your forum. |
Nikkol ~ Help Us Help You | ReadMe | 3.4.03 fixes | security fixes ~ |
|
|
bjlt
Senior Member
1144 Posts |
Posted - 13 May 2003 : 23:14:10
|
I remember when I tried another forum(ubb?) if you give an age below 13 you get a page says print it and let your parents to sign and send back ....
If the server is in the US but the company and target is not in US does that law apply?
|
|
|
Doug G
Support Moderator
USA
6493 Posts |
Posted - 14 May 2003 : 02:30:22
|
quote: If the server is in the US but the company and target is not in US does that law apply?
Who knows? COPPA compliance is probably still open to interpretation. Any forum operators that has a forum that may be subject to COPPA should consult their own professional or legal consultants to verify their site is in compliance with the requirements of the COPPA law.
|
====== Doug G ====== Computer history and help at www.dougscode.com |
|
|
Topic |
|