subscribe Support our award-winning journalism. The Premium package (digital only) is R30 for the first month and thereafter you pay R129 p/m now ad-free for all subscribers.
Subscribe now
Picture: BLOOMBERG
Picture: BLOOMBERG

Washington — Microsoft will pay $20m to settle US Federal Trade Commission (FTC) charges that the tech company illegally collected personal information from children without their parents’ consent, the FTC said on Monday.

The company had been charged with violating the US Children’s Online Privacy Protection Act by collecting personal information from children who signed up to its Xbox gaming system without notifying their parents or obtaining their parents’ consent, and by retaining children’s personal information, the FTC said in a statement.

The company did not immediately respond to a request for comment late on Monday.

The order requires Microsoft to take steps to improve privacy protections for child users of its Xbox system. It will extend protections to third-party gaming publishers with whom Microsoft shares children's data, the FTC said.

“Our proposed order makes it easier for parents to protect their children’s privacy on Xbox and limits what information Microsoft can collect and retain about kids,” said Samuel Levine, director of the FTC’s Bureau of Consumer Protection.

“This action should also make it abundantly clear that kids’ avatars, biometric data and health information are not exempt from [the act],” Levine added.

The law requires online services and websites directed to children under 13 to notify parents about the personal information they collect and to obtain verifiable parental consent before collecting and using any personal information collected from children.

From 2015 to 2020, Microsoft retained the data that it collected from children during the account creation process, even when a parent failed to complete the process, according to the complaint.

Bloomberg reports that Microsoft blamed a “data retention glitch” and promised to improve its systems. It quoted a company statement as saying it plans “to develop next-generation identity and age validation — a convenient, secure, one-time process for all players”.

Reuters

subscribe Support our award-winning journalism. The Premium package (digital only) is R30 for the first month and thereafter you pay R129 p/m now ad-free for all subscribers.
Subscribe now

Would you like to comment on this article?
Sign up (it's quick and free) or sign in now.

Speech Bubbles

Please read our Comment Policy before commenting.