Unfamiliar and Unregulated Territory: Protecting Kids in the Metaverse

Nov 6, 2023 by Eric D. Reicin, President & CEO, BBB National Programs

The metaverse is an immersive, virtual, global, always-on space where people, including children and teens, go to socialize, learn, create, shop, game, and share. And it is not going anywhere. Built through the highly sophisticated use of AI, machine learning, and other emerging technologies, the metaverse is also still largely unfamiliar. 

Any new environment that does not yet have its own set of dedicated regulations and guidelines can spur creativity, innovation, and enhanced experience, but it also can pose risks to visitors, especially vulnerable audiences like children and teens. So it is imperative that brands do their due diligence when reviewing their own products for compliance with advertising and privacy laws. But if there are no guidelines for this innovative new environment, what laws apply to the metaverse?

The short answer is relatively simple – all of them. Just because a platform or digital environment is new does not mean that existing laws and regulations do not apply to it. But often it is the application of that guidance to the new environment that can pose the greatest challenge. For instance, do the Federal Trade Commission (FTC) rules around endorsers and influencers apply to avatars and computer-generated influencers in the metaverse? What are the ways to apply appropriate disclosures to advertising in the metaverse, and what happens if the platform I am building on does not yet have sophisticated ways for me to apply them? In addition, how will the risks and harms identified recently proliferating on social media – such as bullying, body image issues, harassment, revealing too much personal information, making unintended purchases, or exposure to violence – show up in the metaverse?

Meta, a company dedicating everything – including its name – to the metaverse, is demonstrating that navigating this unregulated space is challenging, especially in certain demographics like children and teens.   

When your advertising or marketing is directed to children under the age of 13, things can be even more complicated. Children may be more vulnerable as an audience due to their limited knowledge, experience, sophistication, and maturity. According to the Advertising Guidelines developed by the Children’s Advertising Review Unit (CARU), “Children have limited knowledge, experience, sophistication, and maturity. Advertisers should recognize that younger children have a limited capacity to evaluate the credibility of information, may not understand the persuasive intent of advertising, and may not even understand that they are viewing or hearing advertising.”

Brands should not be confused: advertising and privacy law and self-regulatory guidelines, including CARU’s privacy guidelines and the Children’s Online Privacy Protection Act (COPPA), apply to the metaverse just as they would on any other platform. Beyond self-regulatory guidance, FTC regulations and guidance about truthful and transparent advertising apply in the metaverse as well. For instance, Section 5 of the FTC Act does not tolerate advertisers being deceptive or unfair when it comes to affecting commerce.

CARU’s Advertising Guidelines build upon that guidance by enumerating special responsibilities advertisers have regarding children, including areas such as clear and conspicuous disclosures, blurring of advertising and non-advertising content, in-app and in-game advertising and purchases, and endorsers and influencers.  

In addition, areas of federal and state law relating to privacy, intellectual property, and consumer protection must be considered. And for companies operating globally, policy and legal nuances may apply in some countries or regions such as the United Kingdom and the European Union. Even more complex are the rules in “BRICS” nations (Brazil, Russia, India, China, and South Africa).

Here are some basic principles any brand in the children’s space should follow no matter the platform:

  • Be transparent. All advertising should be easily recognizable as advertising. For example, you can use clear and conspicuous disclosures that notify children that they are interacting with an ad.   
  • Understand when content becomes advertising and also what is not advertising. When a product or brand is presented in an experience with the intent to promote or encourage purchase of a product, it is an ad. The mere presence of a brand or product does not make content advertising if the intent of the content is entertainment or education and not sales.
  • Protect children’s privacy. Get to know COPPA. From sharing their names to their schools and hometowns, children do not understand the risks associated with sharing personal information. COPPA makes it illegal for children to provide certain personally identifiable information without prior consent from a parent or guardian.
  • Understand the privacy policy of each platform you are on.
  • Be aware of relevant state-level and international privacy regulations.  

 

As a new frontier, the metaverse is full of opportunities for brands and also creates a lot of nuanced challenges for companies engaging with or marketing to children and teens. Responsible brands - large and small - should take proactive steps to better understand the advertising and privacy challenges in the metaverse and embrace and adopt these best practices to ensure responsible and positive engagement with children.  

Originally published in Forbes.

Suggested Articles

Blog

Renewal Season: 5 Tips to Ensure a Smooth Data Privacy Framework Process

U.S. companies in the Data Privacy Framework Program (DPF) program recertify each year with the Department of Commerce to assess and account for how they handle and process personal data that originates in the EU, U.K., and/or Switzerland. Here are 5 tips for making it a smooth process.
Read more
Blog

The Evolution of CARU: Laying the Foundation in the 70s and 80s

For the last 50 years, companies marketing to children have held each other to a high ethical standard. The Children’s Advertising Review Unit (CARU) was established in 1974 as the U.S. mechanism of independent self-regulation for protecting children from deceptive or inappropriate advertising. Spanning decades, CARU’s early cases reflect the evolution of the children’s advertising and marketing space.
Read more
Blog

Think of the Children: A Comparison of APRA and COPPA 2.0

It is vital that the business community at large parse through the differing approaches of COPPA 2.0 and APRA to children's privacy and understand where these bills would overlap or contradict each other. To help, the Children’s Advertising Review Unit (CARU) privacy team is breaking them down.
Read more
Blog

Unlocking Global Data Privacy Interoperability with CBPRs

In our digitally connected world, safeguarding personal data is essential. To help accomplish that goal, the new Global Cross Border Privacy Rules (CBPR) System launched this week by the Department of Commerce, offering a much-needed framework for a new era of international data protection.
Read more