<div dir="ltr"><div><br></div>Hi<br><div class="gmail_extra"><br><div class="gmail_quote">On 16 May 2016 at 23:20, Samuel Greenfeld <span dir="ltr"><<a href="mailto:samuel@greenfeld.org" target="_blank">samuel@greenfeld.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div class="gmail_extra"><br><div class="gmail_quote"><span class="">On Mon, May 16, 2016 at 10:09 PM, Dave Crossland <span dir="ltr"><<a href="mailto:dave@lab6.com" target="_blank">dave@lab6.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div class="gmail_extra">Hi!</div><div class="gmail_extra"><br><div class="gmail_quote"><span>On 16 May 2016 at 19:40, Samuel Greenfeld <span dir="ltr"><<a href="mailto:samuel@greenfeld.org" target="_blank">samuel@greenfeld.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex"><div><div>In general, getting information about children using a product targeted at them is a bit of a legal minefield.<br></div></div></blockquote><div><br></div></span><div>Fortunately I'm not interested in information about children :)</div></div></div></div></blockquote><div><br></div></span><div>Getting information about how they use Sugar (rough age/grade, source IP Address, etc.) may count as getting information about them.<br></div></div></div></div></blockquote><div><br></div><div>I'm not interested in age/grade, or their specific IP addresses :)<br><br>What information do you think is safe to collect?</div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div class="gmail_extra"><div class="gmail_quote"><span class=""><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div class="gmail_extra"><div class="gmail_quote"><span><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex"><div>There are countries which don't allow anything about younger children or what they do online to be known without parental and/or school consent.  Said consent may require proving the adult is actually an adult and not a child providing an incorrect date of birth.</div></blockquote><div><br></div></span><div>Which countries? :)<br></div></div></div></div></blockquote><div><br></div></span><div>The United States has COPPA, the EU has Directive 95/46/EC, Australia might be using the Privacy Act 1988 for this.<br><br></div><div>Canada may not have a separate act but current interpretation considers younger children's information as more sensitive under PIPEDA.<br></div><div><a href="https://www.priv.gc.ca/resource/fs-fi/02_05_d_62_tips_e.asp" target="_blank">https://www.priv.gc.ca/resource/fs-fi/02_05_d_62_tips_e.asp</a><br><br></div><div>In any country screwing up can result in significant consequences:<br><a href="https://www.priv.gc.ca/cf-dc/2014/2014_011_1007_e.asp" target="_blank">https://www.priv.gc.ca/cf-dc/2014/2014_011_1007_e.asp</a><br><a href="https://www.ftc.gov/news-events/press-releases/2015/12/two-app-developers-settle-ftc-charges-they-violated-childrens" target="_blank">https://www.ftc.gov/news-events/press-releases/2015/12/two-app-developers-settle-ftc-charges-they-violated-childrens</a></div></div></div></div></blockquote><div><br></div><div><span style="color:rgb(50,50,50);font-family:Helvetica,Arial,"Nimbus Sans L",sans-serif;font-size:13px;line-height:19.5px">Both these seem to be related to _children’s personal information_; I don't think anyone here is interested in that. </span><br></div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div class="gmail_extra"><div class="gmail_quote"><div>Google kind of hints at the environment with their minimum ages for accounts:<br><a href="https://support.google.com/accounts/answer/1350409?hl=en" target="_blank">https://support.google.com/accounts/answer/1350409?hl=en</a><br></div><div><br></div><div>Privacy International notes that in 2014, over 100 countries had what they considered "comprehensive data protection legislation".  So don't expect me to know them all.<br></div></div></div></div></blockquote><div><br></div><div>This is great stuff! Thanks for sharing :) </div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div class="gmail_extra"><div class="gmail_quote"><span class=""><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div class="gmail_extra"><div class="gmail_quote"><span><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex">Historically Sugar Labs has been non-profit, and probably too tiny to get on the radar.  But before social and/or metric features get incorporated into Sugar's core, it would be best to check with the lawyers as to how to do it.</blockquote></span></div><br>Which lawyers? :)<span><font color="#888888"><br clear="all">-- </font></span><br></div></div></blockquote></span></div><br></div><div class="gmail_extra">OLPC had and likely still has one on staff to handle these sorts of issues, along with a full-service legal firm with specialists in this area.<br><br></div><div class="gmail_extra">Sugar Labs probably would have to start with the SFC and see what they recommend.</div></div>
</blockquote></div><br>Since Sugar is packaged and distributed by OLPC, perhaps the OLPC lawyer would be willing to review this. How can I contact them?<br clear="all"><div><br></div>-- <br><div class="gmail_signature">Cheers<br>Dave</div>
</div></div>