HomeNews

The FTC wants to know whether you think “facial age estimation” technology is a good ideaTo protect children’s privacy online

To protect children’s privacy online

Image credit:Rock Paper Shotgun / Daedalic Entertainment

Image credit:Rock Paper Shotgun / Daedalic Entertainment

The Entertainment Software Rating Board (ESRB) have proposed a new method for guaranteeing parental consent to help protect children’s privacy online. The method involves “Privacy-Protective Facial Age Estimation” technology, which would scan an adult’s face to confirm their age before they’re able to consent on behalf a child.

Under Children’s Online Privacy Protection Act Rule (COPPA), online sites and services, such as games, must have consent from a parent before they can collect or use personal information from a child. Microsoft need your permission before your kid can set up a Minecraft account, for example.

Together they have created a technology which “analyzes the geometry of a user’s face to confirm that they are an adult”, according to the FTC. If the adult is deemed to be under the threshold of 25 years old, they would be unable to consent on behalf of the child.

It’s worth noting that even if the FTC approve “facial age estimation” as a method of obtaining parental consent, this does not mean that every service would need to implement it. It would only mean that the method was a valid way of obtaining parental consent under COPPA regulations. For services that do choose to implement it, other methods of consent would likely remain available, and the tech is already in use in some software in countries outside of the US where COPPA doesn’t apply.

As someone who already manage’s children’s accounts across Microsoft and Google ecosystems, I am deeply skeptical that introducing a new, complicated potential point of failure into the process is a good idea. I’m also not wild about anything scanning my face, or the face of children, no matter what provisions or promises are made about how the image is stored, transferred, or deleted after the fact. You can readthe full 38-page proposal(PDF) for more detail on how the system works.