A federal class action lawsuit filed last week in California alleges that the Walt Disney Company is violating privacy protection laws by collecting children’s personal information from 42 of its apps and sharing the data with advertisers without parental consent.

The lawsuit targets Disney and three software companies — Upsight, Unity, and Kochava — alleging that the companies created mobile apps aimed at children that contained embedded software to track, collect, and then export their personal information along with information about their online behavior. The plaintiff, a San Francisco woman named Amanda Rushing, says she was unaware that information about her child, “L.L.,” was collected while playing mobile game Disney Princess Palace Pets, and that data was then sold to advertisers for ad targeting.

The class action suit says these actions violate the Children’s Online Privacy Protection Act (COPPA), which was enacted by Congress in 1999 and designed to protect the privacy of children online. COPPA requires that companies designing apps for children under the age of 13 obtain consent from parents before collecting personal information. In 2013, the FTC revised COPPA, expanding what counts as personal information to include things like geolocation markers and IP addresses. The update also requires third-party advertisers to comply with the rules.

COPPA requires that companies designing apps for children under the age of 13 obtain consent from parents before collecting personal information
In total, the lawsuit names 42 Disney apps it says run afoul of COPPA. The plaintiff is seeking an injunction barring the defendants from tracking and sharing data collected without parental consent, as well as “appropriate relief, including actual and statutory damages and punitive damages,” plus all costs related to prosecuting the action.

Disney has responded to the lawsuit, saying:

“Disney has a robust COPPA compliance program, and we maintain strict data collection and use policies for Disney apps created for children and families. The complaint is based on a fundamental misunderstanding of COPPA principles, and we look forward to defending this action in court.”

This is not the first time Disney has faced COPPA violations. In 2011, the FTC levied a $3 million civil penalty against subsidiary Playdom after it illegally collected and disclosed personal information from “hundreds of thousands of children under age 13 without their parents’ prior consent.”

The full list of Disney apps named in the lawsuit includes:
  1. AvengersNet
  2. Beauty and the Beast
  3. Perfect Match
  4. Cars Lightening League
  5. Club Penguin Island
  6. Color by Disney
  7. Disney Color and Play
  8. Disney Crossy Road
  9. Disney Dream Treats
  10. Disney Emoji Blitz
  11. Disney Gif
  12. Disney Jigsaw Puzzle!
  13. Disney LOL
  14. Disney Princess: Story Theater
  15. Disney Store Become
  16. Disney Story Central
  17. Disney Magic Timer
  18. Disney Princess: Charmed Adventures
  19. Dodo Pop
  20. Disney Build It Frozen
  21. DuckTales: Remastered
  22. Frozen Free Fall
  23. Frozen Free Fall: Icy Shot
  24. Good Dinosaur Storybook Deluxe
  25. Inside Out Thought Bubbles
  26. Maleficent Free Fall
  27. Miles from Tomorrowland: Missions
  28. Moana Island Life
  29. Olaf’s Adventures
  30. Palace Pets in Whisker Haven
  31. Sofia the First Color and Play
  32. Sofia the First Secret Library
  33. Star Wars: Puzzle DroidsTM
  34. Star WarsTM: Commander
  35. Temple Run: Oz
  36. Temple Run: Brave
  37. The Lion Guard
  38. Toy Story: Story Theater
  39. Where’s My Mickey?
  40. Where’s My Water? (paid, lite, and free)
  41. Where’s My Water? 2
  42. Zootopia Crime Files: Hidden Object
Facebook Comments