Google Agrees to $30 Million Settlement Over Alleged YouTube Data Collection from Children

Google has agreed to pay $30 million to settle a class action lawsuit accusing the company of illegally collecting personal data from children under 13 on YouTube without parental consent. The proposed settlement, which was filed in federal court in San Jose, California, must still be approved by U.S. Magistrate Judge Susan van Keulen. The lawsuit was brought by 34 parents and guardians who alleged that YouTube violated state privacy and consumer protection laws by gathering data from children through videos that are designed to attract young viewers. The videos are mainly of cartoons, nursery rhymes, and toy reviews. Plaintiffs claimed that YouTube used this data to deliver targeted advertising, despite federal laws that prohibit such practices without parental permission. The matter involves the Children’s Online Privacy Protection Act (COPPA), which states that companies need to obtain verifiable parental consent before collecting any kind of personal information from children under 13. Although Google paid $170 million in 2019 to settle similar allegations brought by the Federal Trade Commission and the New York Attorney General, the plaintiffs argued that the company continued its practices well beyond that settlement period. The case faced multiple legal issues. It was initially dismissed on the grounds that COPPA preempted state-level claims. However, in 2022, the Ninth Circuit Court of Appeals reversed that decision and allowed certain state law claims to proceed alongside federal law. Judge van Keulen later ruled that the plaintiffs had plausibly alleged “highly offensive” conduct by Google, particularly in knowingly violating COPPA. At present, the settlement would apply to U.S. children under 13 who used YouTube between July 2013 and April 2020. Attorneys estimate the class could include between 35 and 45 million children. While Google denies any wrongdoing on its end, the company agreed to the settlement to resolve the matter without further litigation.   

📰 Mini Headlines ――――――――――――――――――――――

Grok Chatbot Data Breach Exposes 370,000 Conversations

Elon Musk’s xAI faced a major privacy drawback after its Grok chatbot leaked over 370,000 user conversations due to a flaw in its “share” feature. These chats were indexed by search engines and included sensitive and dangerous content. The chats that got leaked ranged from hacking guides to assassination plots. The breach has sparked a lot of criticism and raised serious concerns about AI safety and privacy-by-design failures.  Data Breach Read More → https://opentools.ai/news/massive-data-breach-grok-chatbots-370000-conversations-exposed   

White House Unveils National Health Data Tracking System

The White House announced a new health data tracking system, which they plan to launch in 2026. The major aim of this system is to unify personal health records across providers, insurers, and tech platforms. The system would be managed by CMS, and it would allow patients to share data like lab results and fitness app metrics via integrated apps. The system is seen as a step toward better care coordination, but critics warn of privacy risks, unclear consent protocols, and potential misuse of sensitive data.  National Health Data  Read More →  https://www.jdsupra.com/legalnews/white-house-announces-nation-health-2691352/    

PCI and IWPC Challenge DPDP Act with 35 Questions 

The Press Club of India and the Indian Women’s Press Corps have submitted 35 questions to the Ministry of Electronics and IT. They are urging specific amendments to the Digital Personal Data Protection Act to protect journalistic freedom. They propose clear exemptions for media under the Act, especially for investigative reporting and source protection. They also call for safeguards to ensure unhindered access to public records under the Right to Information framework. Additionally, they seek reduced compliance burdens for news organisations. They have argued that editorial work should not be treated like commercial data processing. These amendments aim to uphold Article 19 protections and preserve press autonomy.  DPDP Act Read More →  https://m.thewire.in/article/government/pci-and-iwpc-submit-35-questions-to-govt-over-concerns-about-dpdp-act/amp    

FTC Warns Tech Giants Over Foreign Pressure on Privacy

FTC Chairman Andrew Ferguson issued formal warnings to 13 major tech firms, including Apple, Google, and Meta. The warning is raised against the weakening of U.S. privacy protections under foreign government pressure. He has cited laws like the UK’s Investigatory Powers Act and the EU’s Digital Services Act, and stated that complying with demands to censor content or weaken encryption could violate U.S. law. Companies were urged to uphold their commitments to American consumers and avoid any kind of deceptive practices. Privacy Protections Read More → https://www.computerworld.com/article/4044467/ftc-warns-tech-giants-against-foreign-government-pressure-on-privacy-and-censorship.html