Home > Izzy Neis Links > CARU finally swings its arm around Gmail

CARU finally swings its arm around Gmail

CARU, GOOGLE COLLABORATE TO ENSURE

CHILDREN’S PRIVACY PROTECTION ON GMAIL.COM

New York, NY – August 11, 2009 – In a collaborative effort to better protect the privacy of children, Google has agreed to modify registration for its Gmail email service, following a recommendation from the Children’s Advertising Review Unit of the Council of Better Business Bureaus.

CARU, the children’s advertising industry’s self-regulatory forum, monitors Websites for compliance with CARU’s Self-Regulatory Program for Children’s Advertising, including guidelines on Online Privacy Protection.

Google’s Gmail account features a user-friendly design that categorizes emails in a conversational style to facilitate searching and organizing information.  Gmail accounts also contain “invite-a-friend” and chat features so that users can correspond via instant messaging with other Gmail contacts, as well as “Google Talk,” which allows Gmail members to talk to one another in real time.

When CARU first reviewed the Gmail Website, potential members were asked to enter their first name, last name, desired email address, a password, and secondary email account.  There was no request for a date of birth during the registration process.  Users were asked to read and accept the “Terms of Use,” which stated “Due to the Children’s Online Privacy Protection Act of 1998…, you must be at least thirteen (13) years of age to Use this Service. Users then needed to click on a box stating “I accept.  Create my account.”

CARU’s guidelines provide that, if a Website has a reasonable expectation that a significant number of children under 13 would visit the site to create accounts, it should employ a neutral age-screening mechanism to determine if it is necessary to obtain verifiable parental consent, before the collection of personally identifiable information. The CARU guidelines exceed the requirements under the Children’s Online Privacy Protection Act, which requires age-screening and verifiable parental consent if the operator of a general audience website has actual knowledge that it is collecting information from children under 13.  Google’s compliance with COPPA was not at issue in CARU’s inquiry.

After reviewing the evidence, CARU determined that the company should have had a reasonable expectation that a significant number of children under 13 would visit the site to create Gmail accounts, and therefore should employ a neutral age-screening mechanism.

In reaching its decision, CARU looked to standard industry practices. CARU noted in its decision that Google was, at the time of CARU’s initial inquiry, the only major email Website that did not employ neutral age screening during the registration process.

In response to CARU’s inquiry, Google maintained that the Gmail service was not directed to children and that the company did not have a reasonable expectation that a significant number of children under 13 would visit the site. Google stated that it genuinely values the work that CARU has done to protect the privacy and safety of children online, and based on its review of CARU’s analysis, would implement a neutral age-screening mechanism for Gmail registration.

Google, in its operator’s statement, said that the company has agreed to screen future registrants for age.

“This was not an easy decision for Google because we have strong reservations about collecting user information that is otherwise unnecessary for providing Gmail services.  Google does not target Gmail to children, nor do we ask users to provide a date – or even a year — of birth.  In fact, Google strives to collect a minimal amount of personal information from users during the Gmail account registration process,” the company said. “Nonetheless, based on the CARU recommendations, we will include a field in the account registration user interface that asks for one of:  birth date, birth month/YEAR or birth year.  If a user enters a date that would indicate that user is under 13, then a session cookie would be set to block the user from re-registering during the session.”

###

CARU’s inquiry was conducted under NAD/CARU/NARB Procedures for the Voluntary Self-Regulation of National Advertising.  Details of the initial inquiry, CARU’s decision, and the advertiser’s response will be included in the next NAD/CARU Case Report.

About Advertising Industry Self-Regulation: The National Advertising Review Council (NARC) was formed in 1971 by the Association of National Advertisers, Inc. (ANA), the American Association of Advertising Agencies, Inc. (AAAA), the American Advertising Federation, Inc. (AAF), and the Council of Better Business Bureaus, Inc. (CBBB). Its purpose is to foster truth and accuracy in national advertising through voluntary self-regulation. NARC is the body that establishes the policies and procedures for the CBBB’s National Advertising Division (NAD) and Children’s Advertising Review Unit (CARU), as well as for the National Advertising Review Board (NARB) and Electronic Retailing Self-Regulation Program (ERSP).

NAD and CARU are the investigative arms of the advertising industry’s voluntary self-regulation program. Their casework results from competitive challenges from other advertisers, and also from self-monitoring traditional and new media. The National Advertising Review Board (NARB), the appeals body, is a peer group from which ad-hoc panels are selected to adjudicate those cases that are not resolved at the NAD/CARU level. This unique, self-regulatory system is funded entirely by the business community; CARU is financed by the children’s advertising industry, while NAD/NARC/NARB’s sole source of funding is derived from membership fees paid to the CBBB. Funding for ERSP is derived from membership fees paid to the Electronic Retailing Association. For more information about advertising self regulation, please visit www.narcpartners.org.

Well well well!!!!!!!!! This is VERY interesting.  I used to complain through rant back in say – ’05/’06 about gmail’s lack-of-age-gating.  I wasn’t pleased.  And when Google bought various social networks, like Dodgeball, etc, where users could be tracked?  I was very, very displeased with the fact young users (who notorious do NOT read tos/pp – i mean, do YOU?) could just sail on through the registration with no barrier -wheeeeeeeeeeeeeeeeeeeeeeeeee-no.  Boo.

It will be innnnnnnnnnnteresting to see how Caru is able to give an ole teacherly squeeze on a notoriously popular kid on the block.  I can see future head to heads playing out in the public like this: Google/Gmail says/does something rather scandalous, and the embarrassed CARU smiles almost fiercely, politely addressing the public around, while stepping on or squeezing the hand of their wayward Google. “Oh, ha ha, that’s not what Bobby meant… now is it, Bobby.”

Anyway – yay.  I feel like this is a good step in the right direction.  Now, let’s just see how it rolls out in the future, yes?

Advertisements
Categories: Izzy Neis Links
  1. No comments yet.
  1. No trackbacks yet.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: