"Key observation themes are summarized below:
- Inconsistent suppression on data collection of contact information for teens during the business account conversion; Lack of suppression on data collection for users with unknown age
- Inaccurate and insufficient implementation of restrictive privacy default setting on Website Embeds for teens
- Inconsistent 1:1 and group messaging restrictions between teens and unconnected adults, including High Risk Adults"
"The IG Growth Acquisition team does not always default to the more restrictive privacy setting of 'opt-out' on Website Embeds for the U.S. teen public accounts under 16 years old. As a result, teens' posts and profiles may be publicly displayed outside the IG app. For example, IA observed that out of 564K U.S. under 16 public accounts registered in May 2023, 43.7% (246K) were not pre-selected to 'opt-out'."