Microsoft pays $20m to resolve Xbox children’s privacy case

Microsoft agreed to pay $20 million (€18.6 million) to settle a US Federal Trade Commission (FTC) claim that the company illegally collected data from children who signed up to use its Xbox gaming system.

The tech giant required anyone using the Xbox Live service to register with a name, email address and age information. But even when the company was aware of users under age 13, it continued to collect and retain data in violation of a US children’s online privacy law, according to the FTC.

Microsoft blamed a “data retention glitch” and promised to improve its systems.

“In addition to our existing multifaceted safety strategy, we also plan to develop next-generation identity and age validation — a convenient, secure, one-time process for all players,” said the company in an emailed statement.

'They are like heroin addicts, spending more and more money': The US debt ceiling explained

Listen | 37:26

In a blog post, Microsoft’s Dave McCarthy said users under age 13 who created accounts before May 2021 will need to reverify they have parental consent to use Xbox.

With the settlement, Microsoft joins the ranks of dozens of other companies including Amazon.com, Alphabet’s Google and ByteDance’s TikTok that have faced FTC penalties for collecting or keeping data on children without parental consent.

As part of the settlement, Microsoft agreed to delete within two weeks any information collected about children without parental consent and to notify any video game publishers that seek personal information if users are children.

Microsoft’s Minecraft — a game franchise popular with children where users create 3D worlds with Lego-like blocks — has 141 million active players worldwide, according to Statista. — Bloomberg