Just as it’s increasingly common to find a smart home assistant on a countertop or an internet-connected camera at the front door, smart toys are also becoming ubiquitous in the playroom. But along with all the entertaining and interactive features come the same security and privacy concerns as other smart devices. 

“Kids can’t make these decisions for themselves,” said Jamie Winterton, director of strategy at Arizona State University's Global Security Initiative. “They don’t have a good sense of what personal information is and what it’s going to mean for them in the world that’s coming.”   Illustration by Changwha Kyung Download Full Image

With more and more interactive, connected toys coming to market, parents need to be especially vigilant about what kind of information these devices ask from children. For instance, many smart toys collect personal information in service of a customized experience.    

“How delightful does your child find it when a device knows the name of their teddy bear and their dog and their best friend? But it’s all very personal information that is not necessarily being protected by toy manufacturers,” Winterton said.  

In 2015, a security researcher discovered that millions of user profiles were easily accessible on the website of interactive toy company VTech. These accessed profiles, which contained photos, email address, names of parents and children and chat logs, weren’t encrypted. As a result, VTech was fined by the FTC. 

Winterton’s guideline for her kids? Lie. In a piece she wrote for New America, she outlines why obscuring your age, name and other information online is a good internet safety for kids. 

Formulating a “secret identity” for every device and internet account has become second nature for Winterton’s children. Before a new toy or device has even come out of the box, there’s a new name, birthday and personal details created for it.  

“We started out by talking about why personal information is important,” Winterton said. “What could someone do with it? Does it feel right to share? Would you walk up to a stranger on the street and tell them your name and birthday? We talk a lot about physical safety with kids, and I think there are a lot of analogies with internet safety we can make to help them understand why it’s important.”

Global Security Initiative Director Nadya Bliss and Jamie Winterton, director of strategy for GSI, take different approaches when it comes to their children and the internet of things. While their strategies differ, the goal is the same: keeping their kids safe in a connected world. Photo by Andy DeLisle/ASU

READ MORE: 7 tips everyone can use to protect their privacy and security.

Global Security Initiative Director Nadya Bliss is wary of the implications carried with smart, personalized toys. Toys that come equipped with microphones and speakers to talk to children are of particular concern. 

“This essentially tells me, something in your child’s bedroom is recording your child and sending information back to a server, doing some analysis and responding,” said Bliss, a computer scientist and a professor of practice in the School of Computing, Informatics, and Decision Systems Engineering. “That creates all kinds of weird questions. For example: Who is listening to your child? Who can tap into that info and learn about your child? Also, if your child says they’re being hurt, is there a legal responsibility to report abuse?” 

Bliss isn’t the only one troubled by the implications of smart toys. In 2017, the FBI released a consumer notice outlining privacy concerns surrounding toys with “sensors, microphones, cameras, data storage components, and other multimedia capabilities.”  

Bliss is also focused on ensuring her daughter feels empowered down the line. 

“I want her to have some control over her own digital footprint,” she said. “Right now, you can see the entire lives of some kids on the internet. By the time they get to the point where they can make their own decisions, they might not want that.”