Meta Case Highlights the Differences in Child Data Protection Laws Between the U.S. and India
This week, a significant legal case against Meta began in Oakland, California. The federal aspect of this case hinges on a law from 1998 designed to protect children under 13 years old. In contrast, India’s laws extend this protection to anyone under the age of 18. Discussions around these laws are important as they illustrate varying standards in child data protection across nations.
India’s Digital Personal Data Protection Act mandates that companies must obtain verified parental consent before handling any data for individuals under 18. It bars practices like tracking, behavioral monitoring, and targeted advertising aimed at children. This approach is notably stricter than the U.S., where the protections offered under the Children’s Online Privacy Protection Act (COPPA) stop at age 13. For instance, in the U.S., a 14-year-old is considered an adult in the context of this law.
The ongoing legal challenges in the U.S. focus on how Meta allowed kids and teens to access platforms like Facebook and Instagram without proper parental consent. Claims concerning older teens involve allegations around addictive features and mental health impacts. These issues fall under consumer protection laws, which aim to address unfair practices.
Interestingly, India’s law closes the gap on these protections. It clearly defines a child as anyone under 18 and requires companies to confirm the identity and age of parents before processing any data. Moreover, it prohibits behaviors that would constitute monitoring or targeting children.
In the Oakland case, states must demonstrate that Meta’s design practices were unfair or deceptive, and harmful outcomes ensued. Conversely, under Indian law, proving harm is less complicated. It only necessitates confirming whether users were underage and if their behaviors were monitored.
As for enforcement, India’s new Data Protection Act is still getting set up. It was passed in 2023, but the rules needed for it to take effect are progressing slowly. The most significant challenge lies in ensuring verifiable parental consent across the nation, which poses logistical hurdles.
Cabinet officials in India have already discussed whether implementing age-based access controls is feasible, indicating preparations for the future. The enforcement structure in India differs as well; it relies on a Data Protection Board rather than litigation by state governments, which can make holding companies accountable more complex.
This current trial in Oakland is significant not only for its potential outcomes for Meta but also because it could generate valuable evidence about the impact of social media on youth. This evidence, made public through the trial, could inform future regulation and enforcement practices—not just in the U.S. but also for bodies like India’s Data Protection Board.
As the situation unfolds, it becomes clear that while different nations strive to protect children online, India’s proposed framework faces challenges in implementation, leaving its promises as a work in progress compared to the legal actions currently unfolding in the U.S.
