Microsoft will pay $20M to settle US charges of illegally collecting children's data

Tech giant Microsoft, which has been charged by the Federal Trade Commission with illegally collecting and retaining the data of children who registered to use its Xbox video game console, has been asked to pay a fine of $20 million for the offence.

Also read: Twitter accuses Microsoft of misusing its data, foreshadowing a possible fight over AI

The agency charged that Microsoft gathered the data without notifying parents or obtaining their consent, and that it also illegally held onto the data. Those actions violated the Children’s Online Privacy Protection Act, the FTC stated.

In a blog post, Microsoft corporate vice president for Xbox Dave McCarthy outlined additional steps the company is now taking to improve its age verification systems and to ensure that parents are involved in the creation of child accounts for the service. These mostly concern efforts to improve age verification technology and to educate children and parents about privacy issues.

Also read: Microsoft: State-sponsored Chinese hackers targeting US critical infrastructure

McCarthy also said the company had identified and fixed a technical glitch that failed to delete child accounts in cases where the account creation process never finished. Microsoft policy was to hold that data no longer than 14 days in order to allow players to pick up account creation where they left off if they were interrupted.

The settlement must be approved by a federal court before it can go into effect, the FTC said.

(With inputs from agencies)