Amazon Echo Dot Kids Violates Privacy Rules, Advocates Claim

Several groups filed a complaint with the FTC. Amazon says one of the problems is a software bug that will be fixed.

Amazon kids dot Amazon

Nineteen privacy advocacy organizations have filed a complaint with the Federal Trade Commission, urging the agency to investigate whether Amazon has violated the Children's Online Privacy Protection Act (COPPA) with the kids edition of its Echo Dot smart speaker.

The organizations, which include the Campaign for a Commercial-Free Childhood (CFCC), the Center for Digital Democracy (CDD), Public Citizen, and U.S. PIRG, say the colorful smart speaker can record and collect "vast amounts of sensitive, personal information from children under 13 [years old]" without the level of parental consent required by law.

The privacy protection act allows companies to verify parental consent by having an adult enter a credit card number and a CCV security code. The complaint says that Amazon's method for acquiring consent falls outside the rules, because it allows a user to enter numbers from gift cards instead. That could make it more likely for a child to enter personal data without a parent's permission, the complaint says.

Working with researchers at Georgetown University, the groups also discovered that once a child tells the Echo Dot Kids Edition to remember certain personal details, parents are unable to delete the information using the FreeTime feature on Amazon Alexa mobile app, which is designed to control the device. Consumer Reports confirmed this problem using our own Amazon Echo Dot Kids Edition.

But we found that if we entered the same information into a regular Echo Dot speaker, we could delete it using the app (details below).

Consumer Reports notified Amazon of this finding; several hours later a spokesperson responded by email, "There is a bug in the Remember This feature for FreeTime on Alexa, and we are working on a fix that should start rolling out soon.”

More about smart speakers

Consumer advocates say that parental consent remains a concern. "If Amazon wants to store sensitive information, such as voice recordings of kids and transcripts of those recordings, they need to ensure that their disclosures to parents are sufficient and that they have obtained verifiable parental consent under COPPA," says Katie McInnis, policy counsel with Consumer Reports. "In this case, it seems that Amazon has failed to provide such notice and properly verify parental consent, and could be subject to FTC enforcement."

“FreeTime on Alexa and Echo Dot Kids Edition are compliant with the Children’s Online Privacy Protection Act (COPPA)," an Amazon spokesperson emailed Consumer Reports, while directing customers to a page outlining the company's privacy practices.

The complaint also alleges that Amazon fails to give notice and obtain consent for information collected by third parties. Of the 2,077 apps—known as "skills" in Amazon parlance—available for the Echo Dot Kids Edition, 1,758 (or 86.4 percent) don't provide any privacy policy, the complaint says.

Protecting Your Privacy From Smart Speakers

How much is your smart speaker listening to you? On the "Consumer 101" TV show, Consumer Reports expert Bree Fowler explains to host Jack Rico how you can protect your digital privacy.

Allen St. John

I believe that technology has the power to change our lives—for better or for worse. That's why I’ve spent my life reporting and writing about it for outlets of all sorts, from newspapers (such as the Wall Street Journal and the New York Times) to magazines (Popular Mechanics and Rolling Stone) and even my own books ("Newton’s Football" and "Clapton’s Guitar"). For me, there's no better way to spend a day than talking to a bunch of experts about an important subject and then writing a story that'll help others be smarter and better informed.