Wrong. A parent or guardian's presence CAN create the required consent. The reason it is an issue inside the parks is because the data collection identifies the physical location of the child...which is a different location from the time the account is set-up. It is NEW information, which would need parental consent under COPPA, presumably,
the parent is aware of what is being collected (a requirement under the law), and his/her presence is enough to create the consent (the law doesn't specify any particular method for acquiring consent).
The information collected from the parks was already disclosed to the parent when they agreed to add the child to their profile or when they secured their tickets.
Simply being present does not meet the standard of NOTICE and getting AUTHORIZATION for that explicit use. When did Disney give you
notice of what data is collected and how it's used when you walk through the gate?
They don't - those transactions (notice and authorization) are handled previously. The data that is collected in the parks is disclosed then (the MyMagic+ terms of service).
COPPA allows for agents to be appointed by parents with regards to consent, and since under COPPA and adult is someone who is at least 13, the new admission policy satisfies the consent requirement.
Really? I look forward to you pointing out the line and reference where delegation is mentioned in the COPPA act...
http://www.ftc.gov/ogc/coppa1.htm
Or the newly revised version that will go into effect this summer (the consolidated version starts at page 151)
http://www.ftc.gov/os/2012/12/121219copparulefrn.pdf
The requirement is parent or legal guardian. Someone accompanying you is not your legal guardian, even if they are responsible for you at the time. A legal guardian in the state of FL is appointed by a court not by an adult accompanying a minor.
Wrong. COPPA is explicit as to what information is protected. Any information that could identfy a child's location must have parental consent. Because location is very specific, any changes are just that, changes, and require parental consent (parental consent is not a one-time procedure)
Parential consent IS a one time procedure unless the types of information or how you share it change. Location data is new data, but it is handled the same as all other 'personal information' in the law. You do not require new disclosure anytime the data being collected itself changes. If your IP, your geolocation, even your email address change - that does NOT require new disclosure (NOTICE and AUTHORIZATION). Only if the type or handling of the data were to change would you be required to make new disclosures and get authorization.
The law does not require new consent each time you log into the website and they use your IP address to geolocate you.. and that is the same as locating you via your band in the parks.
Do you realize the impracticality you suggest that every time they collect a new location reference on you that would require NEW consent? That means EVERYTIME the child used the website.. new consent would be required. Not only is that NOT in the law, it's insane and they never would approve it.
Also, the Magic Bands seemingly act as a repository of personal information that is constantly being disclosed. COPPA regards website actions. The consent granted at account creation on a website is for Disney to have that information. It's use in the parks create "new" disclosures under COPPA in which consent is once again required, even though that is information Disney already has
Complete rubbish. The data collected in the parks is disclosed (NOTICE) and requires consent (AUTHORIZATION) as part of the MyMagic setup. Presumably they will go through a read and acknowledge ToS at the ticket booths to handle in person transactions.
The use of it by adults is obviously consent, and therefore the presence of a child's guardian/parent is the defacto consent (again...there is no prescribed require as to the method of consent under COPPA).
Wrong and wrong again. Please specify in the COPPA requirements on 'verficable parental consent' there is any language about defacto or implied consent. There is ZERO language regarding the parent's use of the service as it relates to requirements of disclosure or notice. The parent's use of the service has absolutely zero relevance.
Second - there ARE methods described in the revised COPPA on what consitutes verifably parental consent, but it is not an exhaustive list. I refer you to page 160 and 161 -
http://www.ftc.gov/os/2012/12/121219copparulefrn.pdf
No, that is not where consent is handled. Contrary to what you may think, Terms of Service agreements and admission "contracts" are not absolute and often have unenforceable language. They are tactics used to prevent people from pursuing claims against the company for a variety of reasons.
A valid point - but tangent to the scope and requirements of COPPA and has zero relevance here except for the scope of what is described under 312.4(a)
General principles of notice. It shall be the obligation of the operator to provide
notice and obtain verifiable parental consent prior to collecting, using, or
disclosing personal information from children. Such notice must be clearly and
understandably written, complete, and must contain no unrelated, confusing, or
contradictory materials.
The only applicability here would be if Disney were found to be non-compliant in their disclosure and authorization. The law is black and white on who must supply consent.
Again, assuming the parent granted another adult permission to take their kids to the parks, they are authorized under COPPA to consent.
Something you just made up because there is nothing about that in COPPA. Provide a cite.
Legal guardianship in FL is through the courts. There are exceptions for temporary custody for extended family that might apply.. but you'd be really stretching it here.
Lastly - just visiting the park in itself is completely OUTSIDE the scope of COPPA. The only reason it has any significance at WDW is because Disney offers online services in conjunction with the features and services. If all they had was you to fill out a paper form, and you did not use any online services (website, reservation system, phone app, etc) COPPA would have zero relevance to visiting the parks. The only reason it does.. is the online aspects and the info in the park feeds into that.
COPPA is not some universal 'protect child information law' - it is EXPLICITLY defined only for online websites and online services. For instance, even if Disney took photos of children onsite and stored them for their own use.. that alone does not make the photos or information subject to COPPA because they were not used in conjunction or as part of a website or online service.