FTC urged by child advocates to investigate Amazon Alexa for alleged privacy flaws

Amazon met with skepticism from some privacy advocates and members of Congress last year when it introduced its first kid-oriented voice assistant , along with brightly colored models of its Echo Dot speaker designed for children.Now those advocates say the kids’ version of Amazon’s Alexa won’t forget what children tell it, even after parents try to delete the conversations. For that and other alleged privacy flaws they found while testing the service, they’re now asking the Federal Trade Commission on Thursday to investigate whether it violates children’s privacy laws.“These are children talking in their own homes about anything and everything,” said Josh Golin, who directs the Campaign for a Commercial Free Childhood. “Why is Amazon keeping these voice recordings?”[caption id="attachment_5623081" align="alignnone" width="1280"]

Amazon Echo Dot. Image: tech2/Sachin Gokhale[/caption]A coalition of groups led by Golin’s organization and Georgetown University’s Institute for Public Representation is filing a formal complaint with the FTC alleging that Amazon is violating the federal Children’s Online Privacy Protection Act, known as COPPA, by holding onto a child’s personal information longer than is reasonably necessary.Amazon said in a statement that its Echo Dot Kids Edition is compliant with COPPA.In one example the advocates captured on video, a child asks the device to remember some personal information, including her walnut allergy.An adult later tries to delete all that information, which includes the voice recordings and written transcripts associated with them. But then, when the child asks what Alexa remembers, it still recalls that she’s allergic to walnuts.“This suggests that Amazon has designed the Echo Dot Kids Edition so that it can never forget what the child has said to it,” the complaint says.It also says that about 85 percent of the more than 2,000 games, quizzes and other Alexa “skills” aimed at kids did not have privacy policies posted. Such skills are generally produced by independent software developers or other third parties, not Amazon.It’s unclear whether the FTC will take up the complaint, since its investigations are rarely public. But the agency has been enforcing children’s privacy rules more seriously in the past year, said Allison Fitzpatrick, a lawyer who helps companies comply with COPPA requirements and was not involved in the complaint.That was the case earlier this week, when the agency issued a warning to a Ukrainian firm that its three dating apps appeared to violate COPPA because they were accessible to children, which led Google and Apple to pull them from their app stores. Earlier this year, the FTC imposed a $5.7 million fine on popular video-sharing app TikTok, the largest COPPA-related penalty since the law was enacted two decades ago.For the FTC to take notice, however, Fitzpatrick said there usually needs to be evidence of “real, actual harm,” not just the theoretical harm she said advocacy groups often outline.But Fitzpatrick said that, on their face, the new allegations against Amazon appear troubling. She said the FTC provides an exemption that enables a business to collect a child’s voice recording without parental consent, but that’s only for a temporary and specific purpose — such as to perform an online search or fulfill a verbal command.