Oath, the Verizon-owned media company that encompasses the former Yahoo and AOL brands, has agreed to pay $4.95 million to settle charges that it violated children’s online privacy by improperly tracking them and auctioning off their data to advertisers.
The settlement, reached with the New York attorney general’s office, is the largest-ever enforcement action under the 1998 Children’s Online Privacy Protection Act (COPPA).
According to Underwood’s office, AOL’s ad-placing business had not been COPPA-compliant until last year and the company had knowingly been disclosing data collected on children under 13 to third parties in violation of the law.
The prosecutor alleged that an AOL account manager in New York had manipulated the company’s ad systems to violate COPPA in order to increase revenue.
Under the agreement, Oath will be required to implement COPPA-compliant systems and to train its workforce on privacy practices. Oath will also have to destroy the information that it improperly collected.
“We are pleased to see this matter resolved and remain wholly committed to protecting children’s privacy online,” an Oath spokesperson said in a statement.
—Updated at 11:35 a.m.