Smart toys collect a wealth of data using built-in microphones, cameras and other sensors. Connected to the Internet, these devices often present significant IT security vulnerabilities.
Consumers who buy a smart toy are inadequately informed about company practices relating to children's personal information. Manufacturers' privacy policies describe in vague terms the use and communication of data captured by these devices. They do not exclude the use of this data for commercial purposes, and they authorize its wide sharing.
In semi-structured interviews, parents expressed incomprehension about the technological capabilities of smart toys and about company practices. An observation test with children shows that, despite the technological limitations of these devices, they can access children's sphere of intimacy.
The smart toy environment raises a number of legal issues relating to cybersecurity, data use and communication, and informing and obtaining valid consumer consent. In all these areas, there are gaps in company practices. Similarly, the law places insufficient emphasis on prevention to guarantee a secure environment for these connected objects.
In conclusion, Option consommateurs makes recommendations based on European standards, including a greater emphasis on preventive measures before the marketing of intelligent toys, and better consumer information.
