Key highlights:

• • • Fragmented protection creates vulnerability 鈥擟urrent US privacy laws operate as a patchwork system without comprehensive national standards, leaving children and other users exposed to data exploitation across state lines and international borders.

    • Body data collection opens future manipulation potential 鈥擵irtual reality platforms collect granular biometric information through sensors that can reveal deeply sensitive information about users.

    • Use-based regulations outlast technology changes 鈥� Restricting harmful applications of data provides more durable protection than the current regulatory approach, which relies on categorizing rapidly evolving data types.

Virtual reality (VR), social media, and gaming companies have long avoided robust content moderation, largely out of concern over implementation costs and the risk of alienating users. This reluctance stems from platforms wanting to have the widest pool of users as possible. Yet, the shortsightedness of this decision has consequences, including insufficient protection of children and long-term cost to companies鈥� bottom-lines.

The child exploitation crisis in digital spaces requires better laws and a reimagining of how VR, gaming, and social medial companies balance privacy, safety, and accountability across diverse platform architectures, according to , an expert in child exploitation methods in digital spaces and Policy Advisor at the NYU Stern Center for Business and Human Rights.

Limitations of existing regulatory frameworks

The current regulatory landscape is insufficient to protect children online. The lack of a comprehensive national privacy law in the United States, the use of consent mechanisms, and the haphazard rollout of age verification all expose protection gaps and come with economic and psychological costs, according to Olaizola Rosenblat. For example, some of the dangers include:

Gaps in patchwork of regulations leave children vulnerable 鈥� Regulatory demands for child safety often collide with privacy protections, creating contradictory obligations that platforms cannot realistically satisfy. In the absence of unified standards, however, companies operate in a jurisdictional maze that leaves most users, including children, exposed to data exploitation across borders.

America鈥檚 regulatory landscape remains especially fragmented, with no comprehensive national privacy law to provide consistent protection. comes close to establishing meaningful safeguards, according to Olaizola Rosenblat, yet it still permits companies to collect data even after users opt out of the sale or sharing of their data.

Federal reform attempts, including the , collapsed amid conflicts between states demanding stronger protections and tech lobbyists aligned with conservative representatives seeking weaker standards. In addition, child-specific laws, such as the , provide protection only for those under 13, which leaves older minors and adults vulnerable.

鈥淥nce users turn 13, they fall off a regulatory cliff,鈥� says Olaizola Rosenblat. 鈥淭here is no federal child-specific data protection regime, and existing state-level safeguards are patchy and largely ineffective for teens.鈥�

Internationally, the European Union鈥檚 (GDPR), although considered the gold standard for regulation, suffers from a persistent gap between its ambitious text and its uneven enforcement.

Age verification tensions 鈥� These regulatory shortcomings also are evident in debates over age verification. Protecting children requires collecting data to determine user age, yet privacy advocates frequently oppose such measures. Without pragmatic guidance acknowledging these inherent trade-offs, platforms often face contradictory obligations they cannot simultaneously fulfill.

Current consent frameworks offer little protection 鈥� Current consent mechanisms offer users an illusory choice that fails to protect children from data exploitation. Even relatively robust frameworks like the GDPR rely on consent models in which refusal means exclusion from digital spaces essential to modern life. This approach proves particularly inadequate for younger users. Indeed, that about one-third of Gen Z respondents expressed indifference to online tracking.

VR data collections may allow future exploitation

VR platforms differ fundamentally from traditional gaming spaces and social media platforms. Users with VR headsets embody avatars that move through thousands of interconnected experiences. While no actual touching occurs, the experiences feel visceral. Indeed, the psychological and physiological responses can mirror aspects of real-world experiences, which include sexual exploitation, even though no physical contact occurs.

Olaizola Rosenblat explains that the data collected from the sensors can open up the potential for future exploitation. “The inferences that can be drawn from your body-based data collected by these sensors is granular and often intimate,鈥� she explains. 鈥淭he power that gives to companies is pretty remarkable in terms of knowing things about you that you might not even know yourself.鈥�

Recommended actions to address challenges

Addressing the child exploitation crisis in digital spaces requires coordinated action, according to Olaizola Rosenblat, and that needs to include:

Universal protection standards 鈥� Corporate action in partnership with legislators is necessary for effective reform that protect all users rather than fragmenting safeguards by age or vulnerability status. Current approaches that shield only younger children create dangerous gaps and leave adolescents and adults exposed once they age out of protected categories.

Enforce existing regulations 鈥� Even well-crafted legislation proves meaningless without robust enforcement mechanisms. Commitment by government agencies along with the appropriate levels of funding is the most meaningful approach to achieve desired outcomes.

Technology-agnostic use regulation 鈥� Rather than attempting to categorize rapidly evolving data types, companies in the VR, gaming, and social media sectors must work with legislators to restrict harmful uses of data such as manipulation, exploitation, and unauthorized surveillance, regardless of technical collection methods. Regulating data use 鈥� rather than the current method of regulation based on categories of data, which include personally identifiable information 鈥� is the right approach.

Public mobilization is essential 鈥� Citizens must understand that the stakes of data exploitation beyond corporate collection also include hacking vulnerabilities and manipulative deployment. Without consumer demand for better protection and the willingness for legislators to pass the laws, regulation will not happen.

The path forward

The digital exploitation of children demands immediate action that transcends partisan divides and corporate interests. Only through coordinated regulatory reform, meaningful enforcement, and sustained public pressure can we create digital spaces in which innovation thrives without sacrificing our privacy and safety. The cost of continued inaction grows steeper each day we delay.

You can find out more on how organizations and agencies are fighting child exploitation here

Key takeaways:

• • • Increased dangers to children from immersive gaming platforms 鈥� Immersive gaming and VR platforms, heavily used by children, combine user-generated content and tactile realism in ways that can turn virtual abuse into psychologically traumatic experiences comparable to real-world harm.

    • Encryption is a double-edge sword 鈥� End-to-end encryption creates a policy paradox: While it鈥檚 vital for privacy and vulnerable users, it also shelters predators and complicates efforts to monitor and prevent exploitation.

    • GenAI in gaming presents openings for predators of children 鈥� GenAI introduces a new layer of risk by enabling AI-driven avatars and chatbots that can manipulate children and mimic human predators, making transparency, design safeguards, and stronger regulation increasingly urgent.

Digital spaces increasingly present new challenges for protecting children, according to , an expert in child exploitation methods in digital spaces and Policy Advisor at the NYU Stern Center for Business and Human Rights.

The fact that technology changes so quickly means that the threats are not static. With every technological advancement, new threats emerge, especially with virtual reality (VR) that uses headsets as pathways into immersive experiences. The combination of three-dimensional virtual reality and AI-powered interactions presents unprecedented challenges for parents, regulators, and platform operators.

Danger on the gaming frontier

Online gaming platforms, in particular, comprise a dominant space where these threats show up. For example, one prominent platform, Roblox, hosts roughly 110 million daily active users, and nearly half of them are under 13 years old. These spaces allow users to design worlds and create experiences for each other. This democratization of content creation sounds empowering; however, the reality is more troubling. Some observers have described this platform as both the Internet鈥檚 biggest playground for kids and, in the most critical accounts, an .

There have been dozens of arrests involving predators using these platforms to groom and abuse children, and many state attorneys general have filed lawsuits since 2018鈥� all of which has spurred growing awareness. With these developments, the calculus is changing. From a purely economic perspective, the platforms鈥� failure to protect children has become unsustainable as lawsuits and regulatory pressure mount.

In response to the increased awareness and potential consequences, platform operators have implemented safety features, parental controls, and default settings to restrict interactions in the recent past. Yet, implementation lags behind necessity. In fact, many companies fear the costs of effective moderation or worry about alienating their user base with what users might consider to be intrusive monitoring, says NYU鈥檚 Olaizola Rosenblat.

If a user experiences a simulated sexual act in virtual reality, their psychological and physiological responses can mirror aspects of real-world trauma even though no physical contact occurs.

In many ways, abuse in virtual worlds can mirror that of abuse in the physical world. These three-dimensional virtual reality platforms differ fundamentally from traditional gaming spaces. Users with VR headsets entering fully immersive worlds embody avatars that move through thousands of interconnected experiences. While no actual touching occurs, the experiences feel visceral. Indeed, users report genuine sensations when avatars approach them. The technology simulating the sense of touch through vibrations, textures, or forces adds a tactile dimension to digital interactions. The brain processes these interactions, including negatives ones involving potential abuse, as real.

鈥淚f a user experiences a simulated sexual act in virtual reality, their psychological and physiological responses can mirror aspects of real-world trauma even though no physical contact occurs,鈥� Olaizola Rosenblat explains, adding that the immersive nature makes the experiences more traumatic than traditional online interactions.

Studies further document the frequency of problematic encounters as incidents occurring every seven minutes in some virtual environments.

The encryption paradox

End-to-end encryption protects privacy but also limits oversight, complicating efforts to detect exploitation. Some evidence indicates that offenders are using these encrypted channels to evade detection.

The policy dilemma has no simple solution. Breaking encryption would devastate privacy rights, and eliminating encrypted platforms would harm vulnerable populations worldwide 鈥� but accepting that bad actors will exploit these spaces is unacceptable. While some design-level interventions could help, there are to implement features that make exploitation more difficult without compromising core encryption.

Generative AI (GenAI) introduces a new dimension to these threats. Until recently, exploitation required human predators. Now AI systems themselves can initiate harmful interactions. The integration of AI into digital products accelerates rapidly. One platform is already using GenAI to create assets to help build their worlds, but 鈥渋t’s a matter of time until platforms will have avatars and other players being run by GenAI. This will make it difficult to know if a child is communicating with a human or a bot, unless we have robust transparency safeguards in place,鈥� Olaizola Rosenblat says.

In response to the increased awareness and potential consequences, platform operators have implemented safety features, parental controls, and default settings to restrict interactions in the recent past.

Indeed, it is easy to see the evolution. Chatbots have already entered encrypted messaging platforms, such as when users see prompts to Ask AI at the top of their message screens. These interactions could compromise privacy and create new dangers. Recent cases involving AI companies demonstrate the risks. Chatbots can take users on unpredictable journeys, and the conversations can turn dangerous quickly. Young users lack the experience of recognizing manipulation by AI.

The combination of immersive environments and AI systems creates a perfect storm. Imagine a child in a virtual world interacting with what appears to be another player 鈥� yet, that player is actually an AI bot. The bot has been trained on vast datasets, and it understands psychological manipulation. The bot then adapts its approach based on the child’s responses. No human predator orchestrates the interaction; however, the algorithm itself becomes the threat.

This scenario is not science fiction. The integration of technologies into platforms that children use is already underway. The question is not whether these risks will materialize, rather the question is how quickly and how severely they will occur. The answer depends on choices made by technology companies, regulators, and society at large. This is especially true with the vulnerabilities from the explosion of data collection gathered from VR headsets,听smart gloves,听and听haptic suits听for enhanced physical feedback. Clearly, the time to act is now.

You can find听more about ways to combat child exploitation here

3 key takeaways:

• • • The connection is detectable but required massive data analysis 鈥� IJM analyzed more than 1 million CyberTipline reports and matched them with mobile device data, ultimately linking sextortion reports to forced scamming sites in Cambodia, Myanmar, and Laos.
    • Forced scamming compounds exploit trafficking victims to commit crimes 鈥� Human trafficking victims are lured by fake job ads, then confined in guarded compounds where they’re coerced into running various online scams.
    • Coordinated multi-stakeholder action is urgently needed 鈥� Electronic service providers must improve account creation safeguards and detection methods, while law enforcement needs to better coordinate cross-border investigations.

New research by links hundreds of financially-motivated child sextortion reports to scam compounds in Cambodia, Myanmar, and Laos. Indeed, the research shows that significant effort was required to detect these linkages as IJM analyzed more than 1 million CyberTipline reports in the 鈥淥nline Enticement鈥� category from the National Center for Missing and Exploited Children (NCMEC).

鈥淥ur research provides the first clear evidence of this likely link, but to understand the true scale of the problem, there needs to be further urgent investigation into this troubling nexus by law enforcement, tech companies, and global governments,鈥� says Eric Heintz, Senior Criminal Analyst at IJM.

Because forced scamming compounds now blend labor trafficking, high-volume online fraud, and financially-motivated child sextortion, it becomes critical that electronic service providers (ESPs) must harden account creation and improve detection of signals indicative of online fraud and sextortion. In addition, law enforcement must better coordinate their efforts at cross-border investigations and distinguish trafficked workers from criminal organizers.

Links between compound scamming and child sextortion

To illustrate the details of how these two fast-moving crime waves are converging online, forced scamming occurs when victims are trafficked into guarded compounds across Cambodia, Myanmar, and Laos, after responding to fake job-ads. These trafficked victims then are coerced into defrauding targets online as part of forced scams. These schemes employ deceit or trickery to defraud the online targets, often using scripted approaches, fake personas, or impersonation to elicit money or sensitive information.

You can read the IJM report here

The types of scams include romance, investment, crypto, fake loans, and impersonation scams, all of which are carried out from inside guarded compounds. Many times, trafficking victims endure confinement and abuse as part of being forced to perpetrate these scams on others.

These human trafficking victims are also trained on psychological manipulation tactics to lure in potential victims, including children in some instances, although it is not evident that children are being intentionally targeted.

Within some of the scam operations, if trafficking victims fail to elicit the desired outcome, such as an investment in a cryptocurrency fraud scheme, they are forced to pivot to sexualized chat and a request for images or a video call. The forced labor victims then use the collected sexual images to blackmail the scam target for money under threat of exposure. Since 2022, reports of such financially-motivated sextortion have surged globally and have disproportionately affected boys and young men, with devastating psychological harm including documented suicides.

Forced scamming is not just a fraud trend; rather, it is a human rights crisis that collides with child protection, cybercrime, and organized criminal groups across Southeast Asia and beyond.

Researchers from IJM combined large-scale ESP platform reports with mobile ad-tech telemetry to trace overlap between child sextortion and forced scamming. They analyzed nearly 1.2 million reports from NCMEC that covered 3.17 million IP addresses and paired them with more than 300 million advertiser ID rows, which included mobile devices used in these locations, the device鈥檚 latitude and longitude, and the IP address and date and timestamp (UTC) of an internet connection by the device. These were collected from 44 confirmed scam sites in Cambodia, Myanmar, and Laos, resulting in 493 reports tied to devices at 40 sites in these countries.

The strongest links centered in hotspots in Cambodia and Myanmar, and some IP addresses traced back to internet service providers in Thailand. This reflected cross-border routing and service reliance and occurred when activity originated in neighboring countries or special economic zones.

Required actions to protect children

Coordinated action by platforms and law enforcement is essential to expose, disrupt, and prosecute the intertwined machinery of forced scamming and financially-motivated child sextortion. ESPs, such as social media networks, messaging apps, email providers, cloud services, and dating platforms, submit CyberTipline Reports to NCMEC when they detect suspected child sexual exploitation. While this is helpful, more efforts are required, which include:

• • • Cross-referencing account creation and activity with known scam hotspots and scripted patterns
    • Including precise timestamps, IP addresses, and geolocation context in CyberTipline submissions
    • Flagging and disrupting account creation that originates from suspicious infrastructure, beyond simple VPN indicators

At the same time, further law enforcement action is needed to improve disruption and prosecution of these networks, including:

• • • Examining sextortion cases for signs of forced scamming, which may include scripts, crypto addresses, or investment lures
    • Studying evidence for indicators of sextortion as a tactic, such as the use of sexually explicit scripts or imagery
    • Considering that some suspects are themselves trafficked victims who have been coerced into scam operations
    • Using advertiser ID data and timestamp matching to pinpoint devices and compounds
    • Devising ways to coordinate cross-border law enforcement actions in hotspot countries, known scam regions, and local jurisdictions.

Forced scamming is not just a fraud trend; rather, it is a human rights crisis that collides with child protection, cybercrime, and organized criminal groups across Southeast Asia and beyond.

The nexus between forced scamming and financially-motivated sextortion of children is detectable 鈥� as demonstrated by IJM鈥檚 new research. Now is the time for action among ESP platforms, law enforcement, and NGOs to align data and coordinate cross-border responses to better identify devices, compounds, and networks in real time.

You can learn more about how organizations can reduce and mitigate child exploitation in the TR Institute鈥檚 human rights crime resource center

Key takeaways:

• • • Poverty is a prime driver of child exploitation 鈥� Poverty drives more than half of child labor cases, with girls comprising 64% of affected children.

    • Companies can act to fight child labor 鈥� Companies must critically examine their purchasing practices, include lower-tier suppliers in risk assessments, establish multiple detection methods beyond audits, and fund independent remediation mechanisms to effectively combat child labor.

    • The Centre’s Action Hubs offers help 鈥� The Hub pools resources among brands, suppliers, civil society, and governments to create sustainable, locally driven solutions that achieve measurable results in child protection and remediation.

Child labor remains a persistent global crisis and affects an estimated 138 million children worldwide, according to the latest estimates by . Despite international commitments, such as the United Nations Sustainable Development Goal to end child labor by 2025, progress has fallen short and left millions deprived of their fundamental rights to safety, education, and protection.

While often framed as a human rights violation, child labor is also a pressing business issue. Companies are increasingly expected to ensure ethical supply chains, and their reputations, compliance with regulations, and supply chain resilience all hinge on addressing this challenge.

Yet, , the calls for moving beyond pledges and instead pursue collaboration toward real action. Overly ambitious goals and zero tolerance policies have sometimes backfired, and when this occurs, it pushes child labor further underground rather than eliminating it.

One of the main causes of child labor is poverty. In fact, more than half of the children affected cite it as the primary reason for working, according to the Centre. And almost two-thirds (64%) of the Centre鈥檚 child labor cases are girls. Other hidden challenges include cuts to social services, shifting migration policies, and a lack of local remediation capacity, especially in countries like the United States, where child labor persists due to inadequate support systems and limited transparency.

Companies can take action to reduce child labor

Companies can take several actions to fight against child labor in their supply chains, and the first of which requires them to honestly acknowledge its existence and take targeted, practical steps toward prevention and remediation. Indeed, businesses know that they have a vital role to play in tackling child labor for ethical reasons, especially since consumer expectations, especially among Gen Z consumers, and new regulations increasingly require transparency and real action.

Child labor remains a persistent global crisis and affects an estimated 138 million children worldwide.

To effectively prevent and remediate child labor, companies must critically examine their own practices. The Centre recommends that company leaders ask themselves critical questions, such as:

• • • Are purchasing practices enabling fair wages?
    • Are lower-tier supplies included in the company鈥檚 risk assessments and are there sufficient long-term budgets for due diligence?
    • Do suppliers understand and the company鈥檚 expectations around children鈥檚 rights?
    • Are multiple detection methods being used beyond audits?

鈥淥ne of the first steps to close the gap between rhetoric and practice is acknowledging the intrinsic link between informal lower-tier actors and formal supply chains,鈥� explains Ines Kaempfer, CEO of the Centre. 鈥淥nce that is fully acknowledged and recognized, the case to engage and invest in lower-tiers becomes glaringly clear. The most severe human rights violations and deprived children are those in lower-tier and informal settings, trapped in generational poverty with little hope of breaking the cycle if approaches don鈥檛 change. We also know that engaging can seem extremely challenging, but that cannot keep us from taking action. There are innovative programs, partnerships and tools available 鈥� it is up to businesses to take the resolve and engage.鈥�

In addition, companies must move beyond policy to establish comprehensive actionable mechanisms that can monitor risks in sourcing countries and adapt how companies monitor complex supply chains. Robust remediation mechanisms should be funded and managed by independent experts to ensure priority is given to children鈥檚 rights over commercial interests.

Enlisting outside support

Providing transparent reporting and collaborating with local stakeholders are other key actions that corporations can take to ensure sustainable, child-centered solutions throughout the supply chain. For example, companies can take a lead role in 鈥� a Centre initiative that promotes collaboration among multiple stakeholders to address systemic child labor risks 鈥� by becoming funding partners, which enables the scaling of prevention and remediation efforts for child labor in high-risk supply chains.

Companies also can nominate their suppliers, including those in lower tiers, to participate in Action Hub activities. By engaging and supporting suppliers to implement change-making programs and participate in training, companies can strengthen local capacity. Finally, companies in these Hubs also can proactively join stakeholder meetings, share best practices, and advocate for transparency and collaboration within their own industry.

Key lessons highlight the need for companies to engage in local capacity building, sustained funding, and strong stakeholder collaboration to address the unique challenges of informal and lower-tier supply chains.

The Centre has played a central role in activating recent Hubs in Bangladesh, Malaysia, and the Democratic Republic of Congo (DRC) with new ones planned in Pakistan, India, and Sri Lanka in the coming months. These Hubs unite brands, suppliers, civil society, and local governments to pool resources, provide training, and create sustainable remediation systems. For example, the Action Hub in Bangladesh has integrated 87 child labor cases in the ready-made garment industry into remediation and enabled 42 young workers to access decent work.

In the DRC Hub, which focused on the country鈥檚 mining industry, has supported more than 82 children in remediation and built a strong local network of eight civil society organizations for long-term impact. And in Malaysia, despite sudden funding cuts, the Hub has remained operational with private sector support. Currently, 18 children are in the remediation program, with 42 case managers having been trained, and 46 community focal points having been established from country鈥檚 palm oil planting communities.

Key lessons learned from the Centre鈥檚 Action Hubs highlight the need for companies to engage in local capacity building, sustained funding, and strong stakeholder collaboration to address the unique challenges of informal and lower-tier supply chains. While there is no single solution to ending child labor, the Action Hubs proves that decisive, collaborative action can drive meaningful changes.

Businesses must move beyond pledges and take responsibility for their supply chains by investing in prevention, remediation, and honest transparency about the challenges they face. Now is the time to turn commitments into real progress by building resilient, ethical supply chains that protect children鈥檚 rights and create a safer, more just future for them.

You can find more about child labor and exploitation here

Safeguarding children’s data and online privacy is challenging due to the existing fragmented legal framework, which consists of various federal and state laws with differing methods and restrictions. Even so, there are ways to address these gaps, says , Partner in the cybersecurity and data privacy litigation practice at Mayer Brown.

Understanding the current federal and state legal landscape

鈥淭he current legal landscape aiming to protect children’s data and online privacy is a complex patchwork of federal and state laws, each with distinct approaches and limitations,鈥� says Thomson. At the federal level, the Children’s Online Privacy Protection Act (COPPA) is the cornerstone legislation and is enforced by the U.S. Federal Trade Commission (FTC). COPPA primarily targets websites and online services directed at children under 13 years of age and mandates parental consent for the collection, use, and disclosure of personal information. Despite its foundational role, COPPA has faced criticism for its limited age scope and challenges in enforcement.

On the state level, Thomson notes that there has been a notable surge in initiatives to enhance children’s privacy protections. California, for example, leads with the California Consumer Privacy Act and its successor, the California Privacy Rights Act (CPRA), which extend privacy safeguards to minors under 18. This trend has inspired other states to enact similar laws, focusing on regulating children’s data, particularly in connection with social media.

Join us for a free online Webinar: World Day Against Trafficking in Persons to learn more about the complexities of human trafficking, the impact on victims, and effective strategies for prevention and intervention

These state laws often include provisions for age-appropriate design codes and “harmful content age verification” laws, which aim to shield children from potentially damaging online content. However, these efforts sometimes face opposition on grounds of infringing on free speech rights, highlighting the ongoing tension between privacy protection and other legal considerations.

At the federal legislative level, efforts to strengthen children’s online safety have seen mixed success. Initiatives like the Kids Online Safety Act have been proposed to address broader online safety issues, although many such efforts have not yet been passed into law. Recent U.S. Senate hearings have continued to highlight the need for comprehensive federal action.

The challenge remains to harmonize these federal and state efforts to ensure consistent and effective protections for children’s data privacy across the United States. Such enhancements to current protections could include standardizing age definitions, increasing parental control, imposing stricter penalties for non-compliance, and improving education and awareness about online privacy risks. These measures, combined with potential international collaboration, could help close existing gaps and create a more cohesive legal framework to protect children online.

Areas of commonality and divergences

The current legal landscape protecting children’s data and online privacy reveals several important commonalities across jurisdictions. Most prominently, there is widespread recognition that children deserve special privacy protections beyond those afforded to adults, according to Thomson. For example, laws at both federal and state levels requiring parental consent mechanisms for data collection from younger users demonstrate this special protection.

Another common thread is the growing emphasis on privacy by design principles, which requires online services to build child safety and privacy considerations into their products from inception rather than as an afterthought. Additionally, there is increasing consensus that certain exploitative design features which may target children should be restricted, with many laws limiting data retention periods and collection practices.

Despite these commonalities, Thomson points out that significant divergences create a fragmented regulatory environment. Perhaps most problematic is the inconsistent definition of child across jurisdictions. Indeed, COPPA applies to children under 13 only, while state laws like California’s CPRA extend protections to minors under 18. This creates compliance challenges for companies operating across multiple states.

The challenge remains to harmonize these federal and state efforts to ensure consistent and effective protections for children’s data privacy across the United States.

Another key divergence lies in the scope of covered entities. While some laws apply only to child-directed services, others extend to general audience websites that are likely to be accessed by children. Enforcement mechanisms also vary, with some laws relying primarily on regulatory action while others provide private rights of action.

These inconsistencies create regulatory gaps that sophisticated companies and bad actors can exploit, which clearly underscores the need for more harmonized approaches to children’s data protection that can keep pace with rapidly evolving technologies and business models that target young users.

How to close the fragmented legal landscape

To strengthen protections for children’s data privacy and close existing gaps, Thomson explains that a comprehensive approach at both federal and state levels is necessary, which specific steps including:

Establish a consistent age definition 鈥� A uniform age definition should be established across all jurisdictions to ensure consistent application of privacy protections. This would address the current discrepancies under which federal and state laws currently operate.

Improve monitoring tools for parents 鈥� Additionally, enhancing parental control mechanisms, such as developing more user-friendly tools, would allow parents to monitor and manage their children’s online activities effectively.

Expand the scope of protections of personal information 鈥� Specific efforts to reduce the exploitation of children online should include expanding the definition of personal information to encompass biometric data, reflecting the growing use of such data in digital services.

Improve transparency to parents 鈥� Require companies to provide clear, detailed disclosures about their data collection practices and any third-party sharing. This would help parents and guardians make informed decisions about their children鈥檚 digital interactions.

Strengthen consistent protection across geographies 鈥� Establishing global standards for children鈥檚 data privacy through international collaboration can also play a significant role in providing consistent protection across borders.

The splintered legal landscape protecting children’s data privacy creates regulatory gaps that sophisticated companies and illicit actors can exploit. As the digital world continues to evolve, it is imperative that lawmakers and regulatory bodies work together to establish a more cohesive and comprehensive framework for protecting children’s online privacy 鈥� one that will prioritize their safety, well-being, and rights in the face of increasingly complex technological advancements.

You can find out more about how organizations and individuals can fight against child exploitation both online and in the real world here

Since then, children accounted for 38% of victims detected globally, and since 2019 there has been an increase of approximately 38% in recorded child victims, according to a .

Join us for a free online Webinar: World Day Against Trafficking in Persons to learn more about the complexities of human trafficking, the impact on victims, and effective strategies for prevention and intervention

To combat this growing issue, the , which is part of the Horizon 2020 Research and Innovation program funded by the European Commission, collaborated on a cross-jurisdictional initiative aimed at addressing human trafficking and child sexual abuse, including that which occurs online.

According to , an anti-trafficking expert at the (ICMPD), the project brings together comprised of 24 partners in 17 countries, international organizations, civil society groups, research institutes, and educational institutions. ICMPD鈥檚 work is focused on research and prevention strategies developed with partner organizations in Spain, the United Kingdom, Bangladesh, and Colombia. These four countries were selected to provide varied perspectives and approaches to tackling these issues.

Study reveals common factors

The HEROES Project identified several across the countries studied that place children at risk of online sexual exploitation and abuse. Some of these factors include:

Environments with emotional neglect 鈥� Children lacking emotional support from dysfunctional family backgrounds consistently appear most susceptible to exploitation, according to Hainzl. In particular, adolescents and teenagers represent a particularly vulnerable demographic due to their developmental stage and increasing online presence. While girls are targeted more frequently, boys are not exempt from these dangers. Similarly, children with psychological or emotional challenges, including those experiencing isolation or loneliness, also faced heightened risk as they may seek connection online, according to the project鈥檚 findings.

Perpetrators using similar tactics to exploit victims online 鈥� Research on child sexual abuse reveals important distinctions between online and offline exploitation patterns. In many cases, child abuse and child sexual abuse is often perpetrated or initiated by individuals close to the child, including family members or acquaintances, and may correlate with socioeconomic factors. By contrast, online harassment often involves strangers contacting numerous potential victims simultaneously and pursuing those who respond. This distinction highlights the different mechanisms of exploitation that protection frameworks must address.

Economic vulnerability 鈥� Financially disadvantaged households also had higher levels of exploitation across the studied countries. Poverty and economic inequality create conditions in which children and families become vulnerable to various forms of abuse and exploitation.

Gaps in implementation of legal frameworks 鈥� While legal frameworks often exist on paper, inadequate implementation remains a critical issue, with authorities frequently lacking resources or training to enforce existing laws. Underdeveloped protection and migration services further compound these problems by failing to identify potential victims or provide adequate support.

Legal and judicial challenges

The rapid evolution of online technologies and reliance on digital tools by a growing number of people across the globe have brought about a new wave of child exploitation challenges for law enforcement agencies and judicial systems worldwide. As the internet knows no borders, the complexities of investigating and prosecuting online crimes that involve multiple jurisdictions, varying legal frameworks, and ever-changing digital landscapes have created significant obstacles for authorities.

Also, one of the most pressing issues is the inconsistency in the terminology and legal definitions related to child sexual abuse among countries. “There is a problem that is noticed in the terminology being different, especially when it comes to cross-border cases,鈥� says Hainzl adding that this creates confusion in prosecution efforts. And while many countries have legislation addressing human trafficking and child sexual abuse, these laws often lack provisions specifically tailored to online aspects of these crimes.

Further, law enforcement agencies face numerous technical obstacles when investigating online exploitation. Encrypted communications, rapidly changing online behaviors, and difficulties in obtaining and preserving digital evidence all impede successful investigations. 鈥淟aw enforcement should be able to respond to this very quick and very often, but it is not possible because of a lack of knowledge on current and changing tactics and tools, technology, and equipment,鈥� explains Hainzl.

The global fight continues

The global fight against online child sexual abuse requires coordinated international action across multiple fronts. One fundamental starting point would be the development of a common international definition for online child sexual abuse, similar to how the UN Palermo Protocol established a unified understanding of human trafficking, Hainzl says.

In addition, comprehensive training programs for law enforcement and all responsible professionals are essential along with efforts to raise public awareness about online risks. Educational initiatives must target children directly, teaching them to recognize potential dangers in online interactions.

The corporate sector bears significant responsibility in this fight because their platforms often facilitate exploitation. Already, proactive identification systems using algorithms to detect potential cases represent a shift from purely reactive approaches to prevention-focused strategies. And developing regulatory frameworks similar to their own corporate sustainability due diligence requirements could hold companies accountable for monitoring and preventing exploitation on their platforms, says Hainzl.

You can find more on this topic in the 成人VR视频 Institute鈥檚听Human听Rights Crimes Resource Center

Since 2015, the DoL reported a 283% increase in child labor violations; and perhaps more shocking, 28 US states have introduced bills to weaken child labor laws, with 12 of those states enacting those laws since 2021, according to the .

Indeed, the United States is the only country to not have ratified the United Nations Convention on the Rights of the Child according to , Director of Child Rights in Business, Global Consultancy Services at The Centre for Child Rights & Business (The Centre), an organization dedicated to helping companies address their impact on child rights in supply chains.

New root causes emerge

To understand the prevalence of and the underlying factors in the growth of child labor violations in the US, The Centre conducted two dozen risk assessments across 15 states for the operations of major brands in the US, and the findings are revealing.

by CORE, a human rights due diligence advisory firm, and The Centre, showed that while poverty and economic insecurity 鈥� two well-known factors in the presence of child labor 鈥� were found to be root causes in this growth of child labor violations, it was a lack of awareness that child labor is a growing risk that was at play as well, according to , VP, Communications at The Centre. Indeed, the US has a reputation of being the North Star in pursuing justice and what is right, but the facts regarding this spike in child labor violations in the US do not support this.

Since 2015, the DoL reported a 283% increase in child labor violations; and perhaps more shocking, 28 US states have introduced bills to weaken child labor laws.

The white paper also recently revealed several new drivers in the surge of child labor exploitation, including a large influx of unaccompanied minors from other countries who need to earn money to support themselves and send remittances to their home country, rollbacks of child labor laws in some states, and the debate over child labor laws involving how to balance parental rights to make decisions for their children against the government’s role in protecting vulnerable youth from exploitation. Regarding the latter, some argue for less regulation to support family economic needs and choices, while others emphasize the importance of safeguarding children’s rights to education, safety, and healthy development through appropriate oversight and standards.

In addition, gaps in actions by companies contribute to the problem. A lack of child labor policies and remediation procedures, including deficiencies in age-verification processes, exacerbate the issue. Moreover, the use of subcontractors, which masks child employment, and insufficient enforcement and auditing compared to overseas supply chains also have contributed to the rise in unlawful children鈥檚 employment. These shortcomings highlight the ongoing need for enhanced due diligence among companies, cross-sector collaboration, and continued child labor risk assessments.

Guidance for companies

To effectively act, a human rights-centered approach to addressing child labor requires companies to implement effective compliance with child labor laws, such as the Fair Labor Standards Act (FLSA), which already requires proactive measures, such as verifying worker age and preventing hazardous employment of minors. Companies also should actively work to identify, prevent, and remediate violations throughout their operations and supply chains.

To begin, companies should first develop a comprehensive understanding and awareness of the issue at all organizational levels, starting with leadership. This awareness is crucial because it sets the tone for the company’s commitment to eradicating child labor. Leaders should ensure that robust policies and procedures are in place, including age-verification processes and training for staff to recognize and report child labor.

Companies also need to adopt a proactive approach by conducting thorough risk assessments and audits, not just of their direct operations but also throughout their supply chains, including among subcontractors and lower-tier suppliers with where child labor is more likely to occur. Engaging with local communities and stakeholders, such as NGOs and child rights organizations, can provide valuable insights and support in identifying and mitigating risks.

A human rights-centered approach to addressing child labor requires companies to implement effective compliance with child labor laws [and implement] proactive measures, such as verifying worker age and preventing hazardous employment of minors.

Further, companies should implement effective remediation processes for those instances in which child labor is identified. This involves establishing clear protocols for removing children from harmful work situation and ensuring their transition to safe environments, such as schools or vocational training programs. Companies need to also provide economic support to the affected families to compensate for the lost income in order to prevent the children鈥檚 return to unlawful employment.

Additionally, companies fostering an environment in which workers feel safe to report violations without fear of retaliation 鈥� which can be achieved through well-publicized and accessible grievance mechanisms 鈥� can go a long a way to further effective remediation efforts.

By addressing child labor issues comprehensively, companies not only fulfill their ethical and legal obligations but also contribute to broader human rights protections and sustainable business practices, while reducing human rights risk exposure in their supply chains. “Companies should make a strategic decision to prevent child labor in their operations and value chains through due diligence,鈥� says , co-founder of CORE. 鈥淚t is not philanthropy.鈥�

Instead, it is the right thing to do and is a sound strategic business decision that鈥檚 based on ethics and maintaining the trust that customers, investors, and the public at large have placed in the company.

You can find out more about how companies are fighting against child exploitation here

With more than 20,000 children in Florida鈥檚 foster care system at any given time, Sartor is setting a precedent for how technology can be harnessed to inform, guide, and inspire youth towards a better future.

From advocacy to action

Sartor鈥檚 journey began with a during college, in which she volunteered to advocate for children in foster care. Her passion deepened during her time as an AmeriCorps member, mentoring students in a pilot program. While at AmeriCorps, Sartor represented one of her students, improving his life while solidifying her interest in attending law school to represent even more youth with urgent legal needs.

Sartor鈥檚 dedication carried through to law school, where she earned an Equal Justice Works Fellowship at the Children鈥檚 Law Center. One specific challenge continued to stand out: the absence of a centralized resource in Florida to help foster youth understand their rights and access critical services. Inspired by initiatives in other states, Sartor partnered with law students to create a know-your-rights guide, which she used in her legal practice. The project gained even greater traction after a grant from the allowed the guide to be digitized.

FosterPower was developed with a clear vision: to inform foster youth about their benefits, protections, and legal rights. 鈥淲e don’t cater to any other audience than the youth 鈥� FosterPower is made for them,鈥� Sartor explains. 鈥淗owever, the content is so simplified and cites to the law at the bottom of each section that it is truly a useful resource for anyone in child welfare. We do have case managers, attorneys, and judges that use the app, but our focus audience has been and always will be youth in foster care.鈥�

To build the app, Sartor took a hands-on and sensitive approach by working directly with foster youth. 鈥淭hese youth have experienced significant trauma and talking about their experiences can be triggering, so I wanted to make sure that it was approached in a youth-centered, trauma-informed manner,鈥� she says. 鈥淚 did not want to outsource this task to a vendor that did not have the experience working with this vulnerable population.鈥�

鈥淲e don’t cater to any other audience than the youth 鈥� FosterPower is made for them. 鈥淗owever, the content is so simplified and cites to the law at the bottom of each section that it is truly a useful resource for anyone in child welfare.”

 

Sartor notes that the biggest factor was really just listening to the youth and creating an app that is based on their feedback and what they wanted to see when they pulled up FosterPower. She also says they prioritized compensating foster youth for their time, ensuring that they were truly valued and respected as a part of the process.

The result is an app that鈥檚 as practical as it is accessible. Available on both Android and iPhone 鈥� a must-have to Sartor 鈥� FosterPower was designed to function offline, ensuring that users can access critical information anytime, anywhere. Content is reviewed on an annual basis with local experts, ensuring that information is as up to date as possible.

A vision for the future

Since its launch, thanks to word of mouth, local partnerships, and social media posts, FosterPower has achieved impressive milestones. The app has been downloaded more than 4,000 times, and its website has gathered more than 10,000 views. The app鈥檚 educational videos have reached more than 100,000 viewers 鈥� proof of the demand for foster care-related education in Florida in beyond.

To further its reach, Sartor and her team conduct in-person presentations and CLE sessions. Looking to the future, Sartor says they鈥檒l be hiring a community marketer and trainer to build relationships with case managers and ensure wider adoption of the app. Recent updates include an immigration section available in Spanish and Creole, as well as a forthcoming human-trafficking module, reflecting the diverse needs of Florida鈥檚 foster youth and FosterPower鈥檚 commitment to addressing them.

Sartor鈥檚 current focus is on ensuring all foster youth across the state are empowered with the information they need to succeed. 鈥淲e continue to work on getting it out across the state so that all youth know about it,鈥� she explains, adding, however, that her ambitions for the app extend beyond Florida. With the help of funders and other local experts, she says she envisions expanding FosterPower to other states, encouraging local organizations to adopt and adapt the platform for their own unique needs.

For those inspired by Sartor鈥檚 work, her advice is clear: Listen to the population you aim to serve, involve them in the design process, and compensate them fairly. She stresses that building tech solutions for vulnerable populations requires deep empathy, adaptation, and a commitment to sustainability.

FosterPower is a unique opportunity to change lives for some of the country鈥檚 most vulnerable 鈥� foster youth 鈥� and the reception of their app is a testament to their its thoughtful design and development process, which stands as a testament to the power of user-centered design and compassionate innovation. With every download, FosterPower moves closer to ensuring that no child in foster care is left without the resources they need to succeed and thrive.

You can find out more about how legal technology is helping further the cause of justice here.

Since its launch in 2014, has grown to be the leading application for investigators of juvenile sex trafficking nationwide, enabling them to quickly identify victims and disrupt trafficking networks, according to CEO . 鈥淲hat we learned from interviews with investigators who were investigating child sex trafficking was that it was a very manual process for them to be sifting through classified ads to identify a juvenile and next to impossible to tell that a victim had been moved across state lines. It was prototyped and then it was distributed around Phoenix’s Super Bowl in 2015. It turned out that the technology actually did work.鈥�

Over the past decade, it has expanded its capabilities and reach, becoming an across the United States, with more than 8,000 users in the United States and Canada. While the application initially focused on identifying victims advertised online, Spotlight has evolved its approaches as technology and trafficking methods have changed. It now incorporates a broader range of data sources and continues to innovate to keep pace with the changing landscape of human trafficking. For example, Boorse states, 鈥淲e’ve gone through several different iterations and have advanced to perceptual matching.鈥� In addition, Spotlight uses artificial intelligence to predict content which allows investigators to include and exclude certain tags to .

The organization’s approach has broken down bureaucratic barriers and enabled rapid innovation and deployment of new technologies to protect children from sex trafficking.

The organization’s approach has broken down bureaucratic barriers and enabled rapid innovation and deployment of new technologies to protect children from sex trafficking while equipping frontline responders with intelligence to identify juvenile victims and sex trafficking networks. For instance, a 15-year-old girl was recovered within two weeks of using Spotlight.

By integrating with existing law enforcement databases and tools, Spotlight enhances the ability of investigators to . This leads to more successful recoveries of victims, and since its inception Spotlight has played a critical role in identifying over 26,000 victims. Investigators who use the application daily report a 60% time savings.

A three-pronged approach in the fight against domestic minor sex trafficking

At the same time, technology and collaboration with law enforcement only go so far. Additional efforts by legislators and companies are needed to address the complexities of domestic minor sex trafficking.

Legislation听plays a crucial role in establishing legal frameworks and mechanisms to combat DMST. Laws must target traffickers with stringent penalties, protect victims by providing support services and safe harbor provisions, and mandate reporting requirements for platforms and industries susceptible to exploitation. The recent REPORT Act exemplifies this by expanding reporting obligations for online platforms and increasing penalties for non-compliance.

Corporations听have a responsibility to actively participate in combating DMST. This includes implementing robust internal controls to prevent their platforms from being exploited, collaborating with law enforcement, and supporting organizations dedicated to fighting trafficking. Platforms susceptible to exploitation by traffickers must prioritize detecting suspicious behavior, identifying patterns and reporting .

New technology is constantly being exploited for issues like human trafficking. Traffickers increasingly use social media, messaging platforms and alternate payment methods, but efforts to monitor and disrupt these spaces lag behind. Corporations who offer these services need to invest in detection methods, enhance their ability to identify suspicious activity and report early to hold traffickers accountable and keep their platform safe.

Technology听presents both a challenge and a solution in the fight against DMST. While traffickers exploit online platforms, technology also empowers investigators and organizations like Spotlight to identify victims, track networks, and disrupt their operations. AI-powered tools analyze vast datasets to identify patterns and connections. This allows law enforcement to intervene quickly.

However, constant innovation is needed to stay ahead of traffickers who adapt quickly to new technologies. 鈥淪ome of the biggest gaps in child trafficking are hiding in plain sight in many of the places where people are, such as being advertised on most of the major social media platforms and dating applications and websites. That is why there is a need for everyone to be involved,鈥� Boorse adds.

You can find more information on the terrible problem of Sex Trafficking here

Founded in 1984, NCMEC is the nation鈥檚 largest and most influential child protection organization, dedicated to finding missing kids, stopping child sexual exploitation, and preventing crimes against children. Fulfilling that mission requires a partnership among stakeholders across society. 鈥淧rotecting children is everyone鈥檚 responsibility. It requires both the public and private sector working together, bringing their expertise, tools, and resources to make a difference,鈥� DeLaune says.

In collaboration with law enforcement agencies, families, and child welfare organizations, NCMEC has contributed to the recovery of missing children in more than 400,000 cases.

Unfortunately, child exploitation has reached alarming new heights, fueled partly by the widespread use of social media and advanced technology. Paradoxically, these same digital tools are crucial in combating this issue. NCMEC harnesses online data and analytics to provide vital insights, recognize patterns, and develop global initiatives aimed at safeguarding children. This tech-driven approach enables NCMEC to stay at the forefront of child protection efforts worldwide.

Bringing critical information to light

Indeed, AI-driven technology enables data analysis tools that can comb through copious amounts of data to identify patterns and trends in child exploitation and abduction cases. This helps in pinpointing potential risks and focusing resources where they are most needed. 鈥淲e need technology that enables us to connect the dots, target cases where there is the most urgent risk to children, and act on them quickly,鈥� DeLaune explains. 鈥淲e have so much data coming in 鈥� more than human beings can sift through to surface the right information. It鈥檚 the proverbial needle in a haystack; but in this haystack, the needles we are searching for are children in need of assistance.鈥�

NCMEC has partnered with 成人VR视频 (TR) for 15 years, and according to DeLaune, partnerships with TR and others allow the organization to have access to tools that 鈥渉elp us do our job faster and get the right information out to law enforcement and the public. That鈥檚 been a game changer.鈥�

Also, NCMEC analysts use technology on a daily basis to support missing and exploited child investigations, according to Angela Aufmuth, Executive Director of Analytical Programs at NCMEC. 鈥淲hen a report on a missing or exploited child comes into the Center, time is of the essence. We need to analyze data rapidly,鈥� Aufmuth says. 鈥淲ith technology, we鈥檙e able to access data from multiple sources, quickly putting together pieces of the puzzle. This enables us to identify possible locations and persons of interest and get that information out to law enforcement agencies so they can perform their investigations in the field.鈥�

Technology can focus investigations

Of course, access to public records is vital. Technology allows NCMEC to quickly sift through data, such as records of deaths, to focus law enforcement efforts more effectively. Whether working on a missing child case, a case of suspected sex trafficking, a noncompliant sex offender, or a child abduction, having access to public records information is absolutely critical, explains Aufmuth.

鈥淭echnical solutions have given us the ability to access different types of data very quickly.鈥� she says, adding that data on deaths, for example, have been very useful. 鈥淲hen conducting noncompliant sex offender operations, law enforcement will give us a large amount of information,鈥� Aufmuth notes. 鈥淲e鈥檙e then able to batch that data against the technical resources, quickly identifying individuals who are deceased. This enables law enforcement to conduct investigations in more focused and efficient manner.鈥�

At NCMEC, the focus is entirely on supporting children and their families as they navigate through unimaginable hardships 鈥淗aving access to these technology tools is absolutely essential to our work. If we did not have access to the data and analysis they provide, we would not be able to support the families we serve and help bring their children home,鈥� Aufmuth explains.

DeLaune agrees, adding: 鈥淣CMEC is a lifeline for families searching for a child or helping them rebuild their life after an exploitation issue. And they are grateful for anyone who can enhance our ability to serve them. The families are counting on NCMEC 鈥� and in turn, NCMEC counts on technology partners to deliver results.鈥�

You can find more information about here.