Microsoft eats $20 million FTC fine for violating kids' privacy on Xbox Live, admits no ... - PC Gamer

TL;DR

$20 million fine to the US Federal Trade Commission to settle charges that it violated the Children’s Online Privacy Protection Act (COPPA) by collecting the personal information of minors who signed up to the Xbox gaming service without notifying their parents or gaining parental consent.  Inform parents who have not created a separate account for their child that doing so will provide additional privacy protections for their child by defaultObtain parental consent for accounts created before May 2021 if the account holder is still a childEstablish and maintain systems to delete, within two weeks from the collection date, all personal information that it collects from children for the purposes of obtaining parental consent if it has not obtained parental consent and to delete all other personal data collected from children after it is no longer necessary to fulfill the purpose for which it was collected Notify video game publishers when it discloses personal information from children that the user is a child, which will require the publishers to apply COPPA’s protections to that childUnder the terms of the proposed settlement, Microsoft "neither admits nor denies any of the allegations," but only "admits the facts necessary to establish jurisdiction" for the purposes of the deal—in other words, simply put, it didn't do anything wrong and promises not to do it again.  Inform parents who have not created a separate account for their child that doing so will provide additional privacy protections for their child by defaultObtain parental consent for accounts created before May 2021 if the account holder is still a childEstablish and maintain systems to delete, within two weeks from the collection date, all personal information that it collects from children for the purposes of obtaining parental consent if it has not obtained parental consent and to delete all other personal data collected from children after it is no longer necessary to fulfill the purpose for which it was collected Notify video game publishers when it discloses personal information from children that the user is a child, which will require the publishers to apply COPPA’s protections to that childUnder the terms of the proposed settlement, Microsoft "neither admits nor denies any of the allegations," but only "admits the facts necessary to establish jurisdiction" for the purposes of the deal—in other words, simply put, it didn't do anything wrong and promises not to do it again

Like summarized versions? Support us on Patreon!