NTIA Recommends New Online Safeguards for Children

On July 22, 2024 the National Telecommunications and Information Administration (NTIA) released a comprehensive report titled “Kids’ Online Health & Safety.” The document outlines best practices aimed at protecting children from harassment, cyberbullying, child sexual exploitation and abuse, and exposure to harmful content across various online platforms. It provides recommendations that span social media, gaming environments, e‑commerce sites, and educational tools. The report is available on the NTIA website ¹.

The core of the guidance focuses on three pillars: transparent data collection, robust age‑verification mechanisms, and design standards that prevent deceptive interfaces—often called “dark patterns”—that trick users into sharing more personal information than they intend. In practice this means requiring parents or guardians to provide verifiable consent before any personal data can be collected from children under 13, in line with COPPA’s requirement for explicit parental approval. The report also calls for clearer labeling of biometric data such as facial recognition scans or voice recordings, which must receive affirmative action beyond a simple click‑through agreement to terms and conditions. This mirrors European GDPR Article Nine, where biometric scanning requires explicit affirmative action.

From an industry perspective, the new guidelines are expected to face pushback because many social media and advertising networks rely heavily on behavioral profiling techniques already flagged as problematic under privacy laws. The NTIA notes ad targeting revenue models could see reduced income if these stricter rules limit data granularity. However, experts argue that the benefits outweigh potential losses; stronger safeguards reduce risk of exploitation and abuse while giving platforms clear compliance pathways.

In addition to the policy recommendations, the NTIA report highlights emerging challenges posed by immersive gaming environments like Roblox, where the boundary between game and social space is blurred. Verifying age without relying solely on self‑reporting becomes critical when older users pose as minors—a vulnerability noted since at least 2016 when concerns about predator accounts surfaced widely across online forums dedicated to parental safety. The draft suggests increased platform accountability through algorithmic transparency requirements similar to those proposed under EU’s Digital Services Act due out next year.

The expert commentary accompanying the release stresses that “dark patterns”—deceptive website designs that trick users into providing data they wouldn’t otherwise share—are a key challenge. These practices have drawn scrutiny in Europe (GDPR Article Nine) where biometric scanning requires explicit affirmative action beyond simple click‑through agreement to terms & conditions alone. While the NTIA recommendations will likely face pushback from industry stakeholders concerned over new compliance costs, many child‑privacy advocates welcome the move as an essential step toward closing gaps left by COPPA and GDPR.

Overall, the July 22 report signals a shift toward more proactive protection for children navigating digital spaces. By tightening consent procedures, clarifying biometric data handling, and curbing dark pattern design, NTIA aims to create safer online environments while giving platforms clearer guidance on how to meet evolving privacy expectations.