Hacker News new | ask | show | jobs
by VWWHFSfQ 1463 days ago
It's clarified in the actual policy statement [0][PDF].

Particularly:

> must not condition participation in any activity on a child disclosing more information than is reasonably necessary for the child to participate in that activity.

> are strictly limited in how they can use the personal information they collect from children. For example, operators of ed tech that collect personal information pursuant to school authorization may use such information only to provide the requested online education service.

They're not prohibiting the collection of data, they're strictly limiting what can be done with it.

I think this is good middle-ground privacy policy in general.

[0][PDF] https://www.ftc.gov/system/files/ftc_gov/pdf/Policy%20Statem...

1 comments

> must not condition participation in any activity on a child disclosing more information than is reasonably necessary for the child to participate in that activity

That may prevent gathering data about, for instance, their performance on other related skills.

> are strictly limited in how they can use the personal information they collect from children. For example, operators of ed tech that collect personal information pursuant to school authorization may use such information only to provide the requested online education service

How about using their PII to link data sources together? That might be done for the improvement of related systems, rather than to provide the educational service used by the child. I mean it’s arguable, but this could create a real chilling effect.