A Kids Online Safety Bill in Time for the Holidays?
It's Possible.
December 9, 2024
Jessica Arciniega, Katherine Kalpos, Morgan Sexton, and Amelia Vance
CC BY-NC 4.0
Hello all,
As you may recall–the Senate passed the Kids Online Safety and Privacy Act (KOSPA) in July, incorporating two major student and child privacy bills–the Kids Online Safety Act (KOSA) and the Children and Teen’s Online Privacy Protection Act (COPPA 2.0). The House Energy & Commerce Committee passed different versions of KOSA and COPPA 2.0 in September, leaving questions about how these bills would proceed. This weekend, Senator Blackburn released a new version of KOSPA which reconciles several of these differences–and may even be able to pass both chambers of Congress before the end of the year.
We’ll be going through this version of KOSPA–which was released as an amendment in the nature of a substitute (AINS)–in detail over the next few days. So far, we’re happy to see that Title I (KOSA) includes an exception requiring covered platforms to provide certain safeguards and parental tools directly to the school when the platform is acting on behalf of the school under a contract that complies with COPPA and FERPA. This would alleviate our concerns about parents being able to turn off privacy safeguards schools negotiate with edtech vendors or completely delete student’s accounts on edtech platforms used in school. However, since the exception is within brackets, it is uncertain whether it will be included in the final KOSPA AINS.
We are also glad to see that Title II (COPPA 2.0) has not changed. As a reminder: PIPC has endorsed COPPA 2.0. COPPA 2.0 would ensure that schools retain the legal authority to consent to data collection and use on behalf of parents in educational contexts if the technology services are solely for the use and benefit of the school and for no other commercial purpose. School districts have consistently relied on the FTC’s COPPA FAQs and the FTC’s Statement of Basis and Purpose to the 1999 COPPA Rule to consent to such technology uses. This long-standing administrative authority has not yet been codified into federal statute, and the FTC’s efforts to codify this authority in regulations (as proposed by the recent NPRM) are uncertain. COPPA 2.0 would solidify this fundamental administrative and educational function for school districts, safeguarding their ability to effectively incorporate privacy-protective edtech into the classroom.
Notably, several of the constitutional concerns in KOSA may be addressed in this version of KOSPA. According to a press release from Senators Blackburn and Blumenthal, “changes were made to further make clear that KOSA would not censor, limit, or remove any content from the internet, and it does not give the FTC or state AGs the power to bring lawsuits over content or speech, no matter who it is from” and “The bill passes First Amendment scrutiny because it is content neutral.” We recommend this article from TechPolicy.press for a refresher on some of the First Amendment issues at play.
Stay tuned for more information as we keep digging into the KOSPA AINS (including how the bill’s language about transparency may address other First Amendment concerns raised by recent court cases). We’ll keep you updated on our analysis as it develops.