The FTC has fined Microsoft $20 million for illegally collecting children’s info

[mgftp]

...

Microsoft has agreed to pay the US Federal Trade Commission (FTC) $20 million for illegally collecting personal information from children on Xbox consoles without their parents’ consent.

According to an FTC statement, the Xbox sign-up process violates the Children’s Online Privacy Protection Act because it collects children’s personal information without notifying their parents and getting their permission.

Xbox was also accused of “illegally retaining children’s personal information”, something the company has admitted and described as a “technical glitch”.

The issue, which was mainly remedied in late 2021, revolved around the process required when signing up for an Xbox Live account.

When a user signed up for an account they had to provide their full name, email address and date of birth. Even if this date of birth showed the user was under 13, they were still asked to provide more personal information including their phone number.

Until 2019, this also included a pre-checked box agreeing to receive promotional material and to let Microsoft send user data to advertisers.

Only after this information was provided did the process then require anyone under 13 to get a parent to complete the rest of the account creation process. However, according to the FTC’s complaint, from 2015 to 2020 the child’s data was still retained even if the process wasn’t completed, sometimes for years.

Until 2019, this also included a pre-checked box agreeing to receive promotional material and to let Microsoft send user data to advertisers.

Only after this information was provided did the process then require anyone under 13 to get a parent to complete the rest of the account creation process. However, according to the FTC’s complaint, from 2015 to 2020 the child’s data was still retained even if the process wasn’t completed, sometimes for years.

In a statement on the Xbox website addressing the $20 million settlement, CVP of Xbox Player Services Dave McCarthy referred to the issue as a “data retention glitch” and said: “Regrettably, we did not meet customer expectations and are committed to complying with the order to continue improving upon our safety measures.”

McCarthy explained: “During the investigation, we identified a technical glitch where our systems did not delete account creation data for child accounts where the account creation process was started but not completed.

“This was inconsistent with our policy to save that information for only 14 days to make it easier for gamers to pick up where they left off to complete the process.

“Our engineering team took immediate action: we fixed the glitch, deleted the data, and implemented practices to prevent the error from recurring. The data was never used, shared, or monetised.”

He added: “Since the FTC settlement, we have updated our account creation process, which now requires players to first identify date-of-birth and, if under 13 years old, obtain verified parental consent before providing us with any information such as phone number or email address.

“This updated process ensures that we can identify potential child accounts immediately and make clear to parents and caregivers the next steps to protect their children’s data and play safely on our network.

“Over the coming months, players who are under the age of 13 and created an account prior to May 2021 will require parental reconsent – meaning a parent will be prompted to reverify the account and grant permission for their child to continue gameplay and activity on Xbox. We are committed to making this process as seamless as possible.”

[bongowongo]

So you're telling me there's a lot of PDFiles at Groomersoft?

[Coal Man]

Jay and taskmob shaking rn @ their info being collected

[OneLegSquats]

MS with the peedo vibes just like it's fans. What a surprise

[img]https://static01.nyt.com/images/2019/10/08/business/00epgates1/00epgates1-********Jumbo-v3.jpg?year=2019&h=550&w=1050&47645f62eb12658646df 3267c22d76c7&k=ZQJBKqZ0VN[/img]

[taperedtam]

...

just the cost of doing business for them honestly. this "fine" is more like a "fee".

they think "we'll do something illegal, gain $100 of millions of it, and then have to settle for a fine, a fraction of the amount we earned. sounds good to us"

the end