Child apps, personal data regulation and home-country compliance
Résumé
This article uses an original dataset on apps targeted at very young children to explore the types and scope of data that is collected about children when they use online mobile applications. We show that in the global economy of app developers, the geographical location of the developer influences whether they collect sensitive data, such as precise location, about their child users. Developers based in the US or in the OECD are less likely to collect sensitive data, while developers in countries that have no privacy law are most likely to collect sensitive data. We also distinguish the effects of an official Google program which encourages developers to comply with US child privacy regulation. We find that 10% of apps that are targeted at children under 5 that certify themselves via the program collect sensitive data from their child users. By contrast, 47% of apps which are targeted at children under 5 through keywords such as ‘toddler' or ‘preschool' which do not self-certify collect sensitive data about their users.