Children’s Privacy in the Big Data Era: Research Opportunities
- aSchool of Communication, American University, Washington, District of Columbia;
- bCenter for Digital Democracy, Washington, District of Columbia; and
- cDepartment of Media and Communication, University of Oslo, Oslo, Norway
Dr Montgomery conceptualized and designed the manuscript, drafted the original manuscript, consulted with all authors on the analysis and use of sources, and finalized the manuscript; Mr Chester conducted the research on the contemporary digital marketplace, drafted sections of the manuscript, and participated in the editing of the manuscript; Dr Milosevic conducted the research on current studies in the United States and Europe of digital marketing’s effect on children, drafted sections of the manuscript, and participated in the writing and editing of the final version; and all authors approved the final manuscript as submitted.
The analysis, conclusions, and recommendations contained in each article are solely a product of the individual workgroup and are not the policy or opinions of, nor do they represent an endorsement by Children and Screens: Institute of Digital Media and Child Development or the American Academy of Pediatrics.
This article focuses on the privacy implications of advertising on social media, mobile apps, and games directed at children. Academic research on children’s privacy has primarily focused on the safety risks involved in sharing personal information on the Internet, leaving market forces (such as commercial data collection) as a less discussed aspect of children’s privacy. Yet, children’s privacy in the digital era cannot be fully understood without examining marketing practices, especially in the context of “big data.” As children increasingly consume content on an ever-expanding variety of digital devices, media and advertising industries are creating new ways to track their behaviors and target them with personalized content and marketing messages based on individual profiles. The advent of the so-called Internet of Things, with its ubiquitous sensors, is expanding these data collection and profiling practices. These trends raise serious concerns about digital dossiers that could follow young people into adulthood, affecting their access to education, employment, health care, and financial services. Although US privacy law provides some safeguards for children younger than 13 years old online, adolescents are afforded no such protections. Moreover, scholarship on children and privacy continues to lag behind the changes taking place in global media, advertising, and technology. This article proposes collaboration among researchers from a range of fields that will enable cross-disciplinary studies addressing not only the developmental issues related to different age groups but also the design of digital media platforms and the strategies used to influence young people.
- COPPA —
- Children’s Online Privacy Protection Act
Today’s young people are growing up in an always-on, interactive media culture, in which they engage continuously with social media, mobile apps, and games. Curating personal profiles, texting friends, and posting opinions online have become routine and commonplace behaviors.1,2 New participatory platforms enable youth to contribute to a shared culture, find their own voices, and join social causes.3 Many of these online activities tap into such core developmental needs as identity exploration, peer relationships, and individual expression.4 Because digital media have become an important arena for young people’s social development, the tension between freely expressing oneself online and protecting one’s privacy has been an ongoing source of debate among scholars, parents, health professionals, and policy makers for the past 2 decades.5
Much of the public discourse has focused on the safety risks involved when young people share personal information about themselves online.6 However, digital privacy needs to be considered in terms of its broader relationship to a child’s health and well-being. For example, privacy is important to young people’s psychosocial development, ensuring they have the freedom and autonomy to explore and try out a variety of possible selves in their search for identity, without risk of surveillance or exposure. It is essential to their ability to engage with others through social media, developing and maintaining relationships with their peers, choosing freely how much information about themselves to share, with whom, and under what circumstances. Youth need privacy protection to seek health information online and search for answers to sensitive personal questions that they are afraid to ask their parents or teachers. Finally, privacy is essential to such core democratic values as autonomy, self-determination, and dignity, and thus, it is a fundamental prerequisite to fostering civic and political engagement among young people.7
Yet even as today’s digital media culture plays an increasingly central role in children’s lives, it poses a growing threat to their privacy. This threat cannot be fully understood or addressed without taking into account how market forces shape contemporary digital media’s relationship with young people. The Internet emerged as a mainstream commercial medium during a period when children’s buying power and value as a target for advertisers were rising. As early adopters of new technologies, children were positioned at the center of a burgeoning e-commerce marketplace. Its core business model, one-to-one marketing, relies on continuous data collection and monitoring of online behavior patterns to target individual users. Thus, marketing and privacy are inextricably intertwined. Big data can be defined as “the data sets and analytical techniques in applications that are so large and complex that they require advanced and unique data storage, management, analysis, and visualization technologies.”1 This integration has become even deeper as big data principles and practices have begun to transform the digital landscape, resulting in a complex set of data collection, tracking, and targeting applications that monitor and monetize individual users’ behaviors as well as their interactions with friends and acquaintances.8
US privacy law provides some protections for children in today’s contemporary media environment, but that protection is limited and continually challenged by increasingly sophisticated marketing and data collection techniques. Moreover, scholarship on children and privacy continues to lag far behind the rapid changes taking place in global media, advertising, and technology.
Big Data’s Transformation of Children’s Media and Marketing
Although television still plays an important role in children’s viewing time, young people are also consuming content on a growing spectrum of digital screens and devices.9,10 The media and advertising industries have shifted their strategies to take advantage of these changing, cross-platform engagement patterns.9 This has created a ubiquitous media environment in which content, culture, and commerce are highly interconnected, reaching and engaging users across the Web, on mobile devices, and in the real world.11
Advances in computer technology, artificial intelligence, digital communication networks, and sophisticated data processing and analysis have vastly increased the amount, speed, and variety of data that can be gathered and processed.12,13 This big data paradigm is shaping the core business models of contemporary media and spurring the proliferation of new, sophisticated, data-driven, digital marketing practices. Marketers can now follow individuals and their social networks across the Web regardless of where they are and what devices they are using, employing conversation surveillance and other Web analytics to monitor in minute detail and in real time how they are influenced and how they, in turn, influence their friends and acquaintances.14,15 Sophisticated algorithms make it possible to tailor and personalize each user’s experience, alter what an individual sees in a newsfeed or other online content, and create advertising messages based on the user’s interests, friends, and routine actions. These tools and techniques are frequently used to identify children and youth of color, including Hispanic people and African Americans, and create targeted marketing messages based on their ethnicities and cultures.16,17
With the growth of the Internet of Things (Internet-connected sensors that change ordinary objects such as cars, refrigerators, and toys into “smart” devices18), children’s daily tools and surroundings can monitor, analyze, and transmit individual and aggregate data and communicate with other objects that are linked through wired and wireless networks.19 Mattel’s “Hello Barbie” is emblematic of a new generation of interactive digital toys; it records a child’s voice, sends the recording to the Cloud, uses voice-recognition software to decode the content, and learns the child’s name, conversational styles, habits, and interests.20 These trends raise the specter of digital dossiers following young people into adulthood, affecting their access to education, employment, health care, and financial services.
Limited Protection Under US Privacy Law
The Children’s Online Privacy Protection Act (COPPA), which was enacted in 1998, provides important protections from many digital marketing and data collection practices. The law requires commercial Web sites and other digital media targeting children younger than 13 years old to limit the collection of personal information, mandates a mechanism for parental involvement, and places obligations on companies for adequate disclosure and protection of data.21 The regulations were updated in 2013 to address some of the new and emerging practices, adding restrictions on behavioral targeting, personalized advertising, and location-based marketing.22 Although COPPA has served to shield children from some of the most egregious data collection and targeted marketing tactics, the law’s basic framework has major limitations. For example, instead of prohibiting companies from engaging in certain practices, it requires verifiable parental permission before a marketer can collect personal information from a child, thus putting the burden on parents to evaluate confusing, legalistic privacy policies. Moreover, nothing prevents children from simply lying about their age, and research has documented that this is common, particularly on highly popular social networking platforms.23 Finally, COPPA applies only to children younger than 13 years old, leaving teenagers without privacy protections in an essentially unregulated, commercial, digital media environment.
Academic Research on Children’s Privacy
For the most part, academic research on children’s privacy is limited in scope and has failed to stay abreast of marketplace developments. Researchers in a handful of studies have attempted to provide insight into youth perceptions of privacy and risk in the online environment and their use of privacy tools on social networking platforms. These researchers have focused primarily on what young people share about themselves voluntarily, without taking into account the largely invisible tracking and data mining techniques that gather information from users without their knowledge.24 The limited research exploring children’s and teenagers’ understanding of privacy in the context of commercial data collection suggests that most young people do not fully understand the complex marketing operations of the digital media they encounter or the nature and extent of the risks they face. For example, although high school students in 1 study expressed little concern about the future use of their personal data, they also demonstrated limited knowledge of the actual business practices involved in using such information for commercial purposes.25 Researchers in another study of tweens found that although they were “beginning to develop skills and knowledge to understand the motivations and objectives of advertisers,” they had “not fully consolidated these abilities.” As a consequence, they tended to “overestimate their understanding and invulnerability to engage in risky behaviors.”26
The parameters of US children’s privacy and marketing policies are based primarily on studies originally conducted in the 1970s documenting children’s cognitive developmental vulnerabilities to the persuasive techniques of advertising.27 Established during a period when television was the dominant vehicle for children’s advertising, this model draws from psychologist Jean Piaget’s theories and is rooted in the notion that cognitive abilities are the key to understanding the persuasive intent of an advertisement and defending against it.28 According to this approach, safeguards are necessary only for the younger segment of the youth population.29 In recent years, a number of scholars have begun to critique this model, arguing, for example, that it oversimplifies the persuasive process and fails to address how contemporary advertising and marketing work.30
Because of the continuing focus on cognitive vulnerabilities of young children, adolescents have been largely overlooked in the regulatory arena. Yet, there is a small but growing body of research identifying biological and psychosocial attributes of adolescence that may play a role in how teenagers respond to commercial media environments.31 Studies have shown, for example, that teenagers are inclined to behave impulsively and often do not think about the consequences of their actions before taking them, even in situations involving considerable risk.32 They also experience greater emotional volatility than either younger children or adults, including frequent and intense negative emotions and fewer positive emotions. All these factors may make teenagers more susceptible to digital marketing and data collection techniques, especially when they are distracted, in a state of high arousal, or subjected to peer pressure.31
Developing innovative approaches for understanding the complex ways in which children and adolescents engage with this new, commercial media culture requires collaboration among researchers from a range of fields, including psychology, anthropology, communication, marketing, and human-computer interaction. Such interdisciplinary collaboration will enable studying not only the developmental issues related to different age groups but also the design and functionality of digital media platforms and the strategies used to influence young people. The changing nature of children’s media also requires rethinking the theories, concepts, and research designs that have been used in the past. For example, a narrow focus on measuring exposure to content cannot capture the myriad ways that today’s youth engage with interactive media. The concept of discrete periods of screen time is being rendered obsolete by the proliferation of mobile devices, the expanding cross-platform media universe, and the growing spectrum of Internet-enabled objects.
The following are several key questions that should serve as building blocks for a larger research agenda to guide future scholarship that can inform policy makers and other important stakeholders:
What are the most relevant theoretical and conceptual models for assessing how children in different age ranges, ethnic groups, and socioeconomic categories are affected by digital marketing and data collection techniques?
How do varying types of engagement across digital platforms (eg, social media, games, and Internet-connected objects) affect a child’s or adolescent’s ability to understand the privacy risks involved?
How can academic researchers access and assess the data analytics systems (including algorithms, software applications, measurement, and data management platforms) that digital marketers routinely employ to profile and target young people through digital media?
What new methods are needed for conducting media-effects research in a complex and evolving digital system in which each child’s experience is personalized and constantly changing?
Clinicians and Providers
Health professionals need to update their policy statements on children’s media and advertising to reflect the contemporary, data-driven practices in the digital media system, identify the risks to privacy, and address the vulnerabilities of older children and adolescents.
Policy makers should expand children’s privacy safeguards to encompass data collection and marketing practices across digital platforms, including toys and other objects that are part of the Internet of Things.
Schools, in collaboration with nonprofits and other institutions, should develop media education and digital literacy programs to help young people participate fully in the contemporary digital media culture without compromising their fundamental right to privacy. Training children and parents in particular about privacy threats and how to protect children’s privacy could also fall in this domain of activity.
- Accepted April 19, 2017.
- Address correspondence to Kathryn C. Montgomery, PhD, School of Communication, American University, 4400 Massachusetts Ave NW, Washington, DC 20016. E-mail:
FINANCIAL DISCLOSURE: The authors have indicated they have no financial relationships relevant to this article to disclose.
FUNDING: Supported in part by the Robert Wood Johnson Foundation and Digital Trust. This special supplement, “Children, Adolescents, and Screens: What We Know and What We Need to Learn,” was made possible through the financial support of Children and Screens: Institute of Digital Media and Child Development.
POTENTIAL CONFLICT OF INTEREST: The authors have indicated they have no potential conflicts of interest to disclose.
- Copyright © 2017 by the American Academy of Pediatrics