Amazon has agreed to pay a $US25 million ($38 million) civil penalty to settle the US Federal Trade Commission's allegations it violated a child privacy law and deceived parents by keeping for years children's voice and location data recorded by its popular Alexa voice assistant.
- Amazon says it disagrees with the Federal Trade Commission's claims on Alexa and Ring and denies violating a law
- The Federal Trade Commission has ordered Amazon to delete inactive child accounts
- Amazon is also required to create a privacy program for its use of geolocation information
Separately, the company agreed to pay $US5.8 million in customer refunds for alleged privacy violations involving its doorbell camera Ring.
The Alexa-related action orders Amazon to overhaul its data deletion practices and impose stricter, more transparent privacy measures.
It also obliges the tech giant to delete certain data collected by its internet-connected digital assistant, which people use for everything from checking the weather to playing games and queuing up music.
"Amazon's history of misleading parents, keeping children's recordings indefinitely, and flouting parents' deletion requests violated COPPA (the Child Online Privacy Protection Act) and sacrificed privacy for profits," Samuel Levine, the Federal Trade Commission (FCT) consumer protection chief, said.
The 1998 law was designed to shield children from online harms.
FTC commissioner Alvaro Bedoya said in a statement that "when parents asked Amazon to delete their kids' Alexa voice data, the company did not delete all of it".
The agency ordered the company to delete inactive child accounts as well as certain voice and geolocation data.
Amazon kept the kids' data to refine its voice recognition algorithm, the artificial intelligence behind Alexa, which powers Echo and other smart speakers, Mr Bedoya said.
He said the FTC complaint sent a message to all tech companies who were "sprinting to do the same" amid fierce competition in developing AI datasets.
"Nothing is more visceral to a parent than the sound of their child's voice," Mr Bedoya, the father of two small children, wrote on Twitter.
Amazon said last month that it had sold more than a half-billion Alexa-enabled devices globally and that use of the service increased 35 per cent last year.
In the Ring case, the FTC says Amazon's home security camera subsidiary let employees and contractors access consumers' private videos and had lax security practices that enabled hackers to take control of some accounts.
Amazon bought California-based Ring in 2018, and many of the violations alleged by the FTC predate the acquisition.
Under the FTC's order, Ring is required to pay the $5.8 million ($AU8.9 million) to be used for consumer refunds.
Amazon said it disagreed with the FTC's claims on both Alexa and Ring and denied violating the law.
But it said the settlements "put these matters behind us".
"Our devices and services are built to protect customers' privacy, and to provide customers with control over their experience," the Seattle-based company said.
In addition to the fine in the Alexa case, the proposed order prohibits Amazon from using deleted geolocation and voice information to create or improve any data product.
The order also requires Amazon to create a privacy program for its use of geolocation information.
The proposed orders must be approved by federal judges.
FTC commissioners had unanimously voted to file the charges against Amazon in both cases.
AP