The U.S. Federal Trade Commission announced a USD20 million fine against Microsoft for alleged Children's Online Privacy Protection Act violations related to its Xbox gaming system. The FTC claimed Microsoft did not obtain parental consent for Xbox account data collection on users under age 13 before carrying out the collection. Corrective actions in the proposed order, which is subject to federal court approval, call on Microsoft to obtain parental consent for any outstanding nonconsensual Xbox accounts and stand up a data deletion program. FTC Senior Attorney Lesley Fair wrote a guidance blog offering further details and insights into the decision.
FTC fines Microsoft $20M for alleged COPPA violations
Related stories
A view from Brussels: Putting AI to the test on EU privacy, data protection developments
Why organizations should prioritize employee data protection to combat spear phishing
Notes from the Asia-Pacific region: Santa's on his way, bringing guidance from Singapore's PDPC, adoption of Vietnam's Data Law and more
EDPB weighs in on key questions on personal data in AI models
New tools aim to improve data activity monitoring, compliance efficiency