Corporate Violations Index
MenuClose

Microsoft pays $20 million to settle Xbox children’s privacy charges

The FTC charged that Microsoft collected personal information from children under thirteen during Xbox account creation before notifying parents and obtaining verifiable consent. The complaint also addressed incomplete parental notices, disclosures to game publishers and retention of children’s data after an account-creation process was abandoned.

Confirmed

Case ID: microsoft-xbox-coppa-2023

What the record establishes

The settlement included a $20 million civil penalty, deletion and retention requirements, changes to account creation and COPPA protections for data shared with third-party game publishers. It resolved government charges rather than recording an admission by Microsoft.

Sources

  1. Primary recordFTC requires Microsoft to pay $20 million over Xbox children’s dataFederal Trade Commission · 5 June 2023 · accessed 11 August 2026

Suggest a correction

Related records

Amazon ordered to pay $25 million over children’s Alexa recordings

The government alleged that Amazon retained children’s voice recordings indefinitely, disregarded deletion requests and used retained data to improve Alexa’s algorithms.

Status
Confirmed
Company
Amazon
Authority
United States Department of Justice and Federal Trade Commission
Decision date
19 July 2023
Penalty
US$25,000,000
View case

CNIL fines Amazon €35 million over advertising cookies

CNIL found that Amazon Europe Core placed advertising cookies on visitors’ devices before consent and provided inadequate information about their purpose. The authority also found that the mechanism offered to people arriving through an advertisement did not provide valid prior consent.

Status
Confirmed
Company
Amazon
Authority
French Data Protection Authority (CNIL)
Decision date
7 December 2020
Penalty
€35,000,000
View case