Compartir a través de

Kids Passport Overview

  • Artículo

Kids Passport Overview

Microsoft® Kids Passport is an extension of the Microsoft® .NET Passport single sign-in (SSI) service, and is designed to give parents the ability to manage how participating Web sites collect and store personal information about their children.

The Children's Online Privacy Protection Act (COPPA)

Kids Passport was created, in part, to help Web sites comply with the Children's Online Privacy Protection Act (COPPA) of 1998, a United States law that requires Web site operators to obtain parental consent before collecting, using, or sharing any personal information about children under the age of 13, if those children reside in the United States or its territories. Personal information is defined as information that can be used to individually identify someone. This includes, but is not necessarily limited to, full name, telephone number, or e-mail address.

Important  This documentation does not attempt to describe or interpret the full legal implications of COPPA. For questions specifically about COPPA, including the effect that COPPA has on your existing site, please contact your legal representative. If you have questions about how the Kids Passport notice and consent mechanism complies with COPPA, please contact your .NET Passport sales representative.

Note  Korea implemented a law that is similar to COPPA and with the release of Microsoft .NET Passport 2.5, Service Pack 2, this Korean law is also supported by Kids Passport. For more information, see the Korean Ministry of Legislation and the Korean Ministry of Information and Communication.

For the purposes of this documentation, "consent" refers to parental consent for Web sites to collect and store personal information about a child. Consent must first be established for .NET Passport as a distinct entity. Kids Passport links each child's .NET Passport to a parent's .NET Passport. The parent must explicitly grant consent to each Kids Passport participating site that collects any personal information about the child. A child will be prevented from signing in to any Kids Passport participating site to which the parent has not explicitly granted consent. Parents can use the Kids Passport service to view a list of sites to which consent is granted. For each site in this list, links are provided that enable parents to view or delete any personal information that the site stores about their child. The functionality for these links is provided by pages that are implemented and hosted by each Kids Passport participating site.

Based on COPPA provisions, Kids Passport defines three different categories of consent:

  • Limited consent is parental consent to collect personal information about children and to share it with third parties only "as necessary to operate the Company's Web site."
  • Full consent is parental consent to collect personal information about children and share that information with other sites or companies.
  • No consent or denied consent means that no personal information about children may be collected or stored.

Your requirements for checking for consent depend on the nature of your site. The language of COPPA distinguishes between "general use" sites and "sites targeted at children." If your site is targeted at children, you should check for consent status for all authentication calls. If your site is a general use site, you can opt to check consent status only when it is specifically required by children's privacy laws, such as COPPA.

Parental consent for a .NET Passport participating site can be granted in the following ways:

  • The parent can establish a new .NET Passport for a child, and then use the Kids Passport site to declare the list of sites for which their child has full or limited consent.
  • A site can include a parameter in authentication calls that causes Kids Passport to display a page to any user who requires consent. This page enables the parent to grant consent immediately.
  • The previously mentioned page can also include the option for the child to have an auto-generated consent request sent to the parent, in case the parent is currently unavailable. This request includes simple instructions telling the parent how to grant consent for the site.
  • At any time, a child can go to the Kids Passport site and submit consent requests.
  • At any time, a parent can go to the Kids Passport site and modify his or her child's consent list.

See Also

Checking for Consent