Weight Watchers agree to pay a $1.5M penalty for illegally collecting personal information from kids without parental consent through its Kurbo app
Kurbo by WW, a weight loss app geared toward children, illegally collected data from users as young as 8 without their parents' consent …
Context & Ripple Effects
The $1.5M penalty lands in a stretch where child-data enforcement has moved from niche cases to a steady drumbeat: Epic Games' $520M FTC settlement over kids' privacy rules and unintended purchases, then Microsoft's $20M COPPA resolution, established the pattern of large platforms paying for collecting children's data without parental consent.
What makes the Kurbo case distinct is the subject matter: an app marketed at children as young as 8 for weight loss. That puts it alongside the earlier finding that automated teen accounts on TikTok were fed tens of thousands of weight-loss videos within weeks — together they sketch an ecosystem where minors' bodies are both the audience and the data source.
First-order effects
- Weight Watchers must pay the $1.5M penalty and rework how Kurbo handles underage users, since the violation was specifically the absence of parental consent for users as young as 8.
Second-order effects
- Other health and wellness apps handling minors' or sensitive data now face the same enforcement template — the Premom fertility-app settlement with the FTC and state AGs shows regulators pairing federal and state action on exactly this kind of data sharing.
- App-store gatekeepers come under added pressure: the Pixalate finding that most top children's apps send ad-industry location data gives Apple and Google a compliance problem they can no longer frame as developers' alone.
Third-order effects
- If the Epic-Microsoft-Kurbo sequence holds, COPPA compliance stops being a legal afterthought and becomes a priced-in cost for any consumer app that touches minors, pushing age-gating and parental-consent flows toward audited defaults rather than self-policing.
- For weight-loss and health apps aimed at children specifically, privacy enforcement is converging with harm concerns — the combination raises the bar for whether such products can operate at all without regulatory sign-off.
The trend: Child-privacy violations are becoming a routine, escalating line item in US enforcement, with health-focused apps for minors drawing the sharpest combined privacy-and-harm scrutiny.