Smart toys with microphones, cameras, Bluetooth, and WiFi connectivity pose a growing threat to children’s security and privacy, according to a new report from the U.S. Public Interest Research Group.
“Smart toys can be useful, fun or educational, but interacting with some of them can create frightening situations for too many families,” Teresa Murray, a co-author of the report and consumer watchdog at the U.S. PIRG Education fund, said.
Companies are collecting more user data than ever thanks to smart devices, and smart toys are not exempt from this trend.
Many smart toys available today collect vast amounts of data about children, including their ages, images, locations, voices, and more. In some cases, this data is stored “very poorly,” putting them at risk of falling into the hands of threat actors. Manufacturers are also known to sell this data to third parties, putting children’s privacy at risk. Furthermore, predators can exploit the features of some of these toys to target children.
Some of the toys mentioned in the report include some with disturbing privacy policies and even one with a microphone that strangers can easily connect to via Bluetooth.
The U.S. PIRG urged parents to carefully consider the toys they buy for children this holiday season.
The Hidden Dangers of Smart Toys
According to the U.S. PIRG’s report, manufacturers are increasingly creating smart toys with AI technologies that can interact and form “relationships” with young children, assessing their facial expressions and voice inflections. This segment of toys includes a wide range of products, from interactive dolls to app-connected action figures and virtual reality headsets tailored for children.
“For example, some interactive dolls with conversation capabilities use microphones and Wi-Fi to transmit a child’s words to speech recognition software maintained by the company. The software then compares the child’s words to a database of possible responses, which the company then transmits to the doll’s microphone over Wi-Fi,” the report said.
The U.S. PIRG noted that some smart toys have been discontinued due to safety issues. For instance, Fisher Price’s Smart Toy Bear, created for children aged 3 to 8, was discontinued after researchers found a security flaw in the accompanying app that could allow hackers to access children’s information without permission, the report said.
Protecting Children from Smart Toy Risks
In light of these findings, the U.S. PIRG urged parents and caregivers to be more vigilant about the types of toys they introduce to their children. Before purchasing any smart toy for your child, the U.S. PIRG recommends thoroughly researching the security features, data collection policies, and the manufacturer’s track record in handling privacy concerns.
The report laid out some actionable steps for parents and gift-givers:
- Research: Conduct a web search for the toy, read reviews, and investigate the toy manufacturer’s history.
- Privacy Policy: Review the toy’s privacy policy online to understand its data collection practices.
- Ask Questions: Inquire about specific features such as internet connectivity, microphones, cameras, recording capabilities, and data collection.
- Age-Appropriateness: Consider the child’s age and their ability to understand and use the toy safely.
“Parents and caregivers should understand the toy’s features,” Samuel Levine, director of the Bureau of Consumer Protection at the Federal Trade Commission (FTC), advised.
For more safety tips, read our guide to internet safety for kids!
In the video below, CBS News puts the spotlight on Fuzzible Friends — a smart toy collection with a privacy policy that openly states it collects users’ speech transcripts.
For more news, follow us on X (Twitter), Threads, and Mastodon!
