Permanent Injunction Imposed on Online Education Platform Company Edmodo, LLC for Alleged Violations of Children’s Privacy Law

The U.S. Department of Justice, together with the Federal Trade Commission (FTC), today announced that Edmodo, LLC (Edmodo) has agreed to a permanent injunction and a $6 million civil penalty in connection with its online educational platform, as part of a settlement to resolve alleged violations of the Children’s Online Privacy Protection Act (COPPA), the Children’s Online Privacy Protection Rule (COPPA Rule), and the Federal Trade Commission Act. The civil penalty is suspended due to Edmodo’s inability to pay.

The Edmodo educational platform, sold to schools throughout the United States, enabled teachers to interface with students, including children under 13 years old, to host virtual class spaces, conduct discussions, share materials, make assignments, and provide quizzes and grades, among other things. In a complaint filed in the U.S. District Court for the Northern District of California, the government alleges that, until approximately September 2022, Edmodo collected the personal information of children under 13, including their names, email addresses, phone numbers, device information, and IP addresses. Edmodo allegedly collected such information without providing notice to the children’s parents or obtaining parental authorization to collect such personal information, as required by the COPPA Rule, and used this personal information to enable third-parties to display targeted advertising to student users between 2018 and September 2022.

The complaint further asserts that Edmodo was retaining this personal information indefinitely. As of March 2020, Edmodo retained the personal information associated with approximately 36 million student accounts, of which only one million were actively using the platform. This indefinite retention violated COPPA’s requirement that an operator not retain personal information of children for longer than “reasonably necessary to fulfill the purpose for which [the information] was collected.”

The stipulated order, entered by the federal district court yesterday, enjoins Edmodo from collecting personal information from children in a manner that violates the COPPA Rule and prohibits Edmodo from retaining children’s personal information for longer than reasonably necessary to fulfill the purpose for which it was collected. The order also enjoins Edmodo from collecting more personal information than reasonably necessary for a child to participate in any activity offered on its service. It also requires Edmodo to destroy personal information improperly collected from children under age 13 and to comply with reporting, monitoring, and recordkeeping requirements. Edmodo is also subject to a civil penalty judgment of $6 million dollars, which is suspended due to Edmodo’s inability to pay.

“The Justice Department takes seriously its mission to protect the online privacy rights of children and their parents. This order spells out clearly to all online providers that it is unacceptable to collect children’s personal information without their parents’ consent,” said Principal Deputy Assistant Attorney General Brian M. Boynton, head of the Department of Justice’s Civil Division. “The department is committed to protecting against unauthorized online collection and retention of information, especially from children.”

“This order makes clear that ed tech providers cannot outsource compliance responsibilities to schools, or force students to choose between their privacy and education,” said Director Samuel Levine of the FTC’s Bureau of Consumer Protection. “Other ed tech providers should carefully examine their practices to ensure they’re not compromising students’ privacy.”

“Children do not lose their privacy protections when they use the internet,” said U.S. Attorney Ismail J. Ramsey for the Northern District of California. “Congress and the FTC have established rules to govern websites and apps collecting and storing the personal information of children. The settlement being announced today demonstrates the Department of Justice’s resolve to enforce those rules. We will continue to work with our partners at the FTC to safeguard children’s online privacy.”

This matter was handled by Senior Trial Attorney James T. Nelson and Assistant Director Lisa Hsiao of the Civil Division’s Consumer Protection Branch, Assistant U.S. Attorney Vivian Wang for the Northern District of California, and Gorana Neskovic and Peder Magee of the FTC.

For more information about the Consumer Protection Branch and its enforcement efforts, visit its website at www.justice.gov/civil/consumer-protection-branch. For more information about the FTC, visit its website at www.FTC.gov.