Business ProfileforWW

The following describes a government action that has been resolved by either a settlement or a decision by a court or administrative agency. If the matter is being appealed, it will be noted below.

A complaint filed in February 2022 by the Department of Justice on behalf of the Federal Trade Commission alleged that WW International, Inc., formerly known as Weight Watchers, and a subsidiary called Kurbo, Inc., marketed a weight loss app for use by children as young as eight and then collected their personal information without parental permission. The settlement order requires WW International and Kurbo to delete personal information illegally collected from children under 13, destroy any algorithms derived from the data, and pay a $1.5 million penalty.

The FTC’s Children’s Online Privacy Protection Act Rule (COPPA Rule) requires that websites, apps, and online services that are child-directed or knowingly collect personal information from children notify parents and get their consent before collecting, using or disclosing personal information from children under 13.

The complaint alleged that Kurbo by WW’s signup process encouraged younger users to falsely claim they were over the age of 13, despite text indicating that children under 13 must sign up through a parent. In fact, from 2014 to 2019, hundreds of users who signed up for the app claiming to be over the age of 13 later changed their birthdates on their profiles to indicate they were really under 13, according to the complaint. These users nonetheless continued to have access to the app until FTC staff contacted the companies.

In 2020, the signup option for children over 13 was revised but problems with the signup process remained, according to the complaint. Kurbo also failed to provide a mechanism to ensure that those who choose the parent signup option were indeed parents and not a child trying to bypass the age restriction, the complaint alleged. In addition, the complaint alleged that parents who signed their children up on the company’s website or an affiliate’s website were shown a notice about information collection only if they clicked a hyperlink buried in a string of other links. Despite changes made to its direct privacy notice in 2019, Kurbo by WW still failed to comply with the COPPA Rule’s notice requirements, according to the complaint.

Finally, the complaint alleged WW and Kurbo violated the COPPA Rule’s data retention provisions by retaining children’s personal information indefinitely and only deleting it when requested by a parent. As part of the settlement, the companies are also prohibited from retaining data collected in the future from children under 13 for more than a year after the last time a child uses Kurbo by WW. The settlement order also requires the companies to destroy all personal information previously collected that did not comply with the COPPA Rule’s parental notice and consent requirements unless the companies’ obtained subsequent parental consent to retain such data. The settlement also requires the companies to destroy any affected work product that used data illegally collected from children in violation of COPPA.

The Department of Justice filed the complaint and stipulated order in the U.S. District Court for the Northern District of California. The Court approved the order on March 3, 2022.