Microsoft — Enforcement
majorAnti-Privacy → Enforcement
Executive Summary
The FTC fined Microsoft $20 million for violating the Children's Online Privacy Protection Act through Xbox. Microsoft collected personal information from children under 13 without parental consent and illegally retained children's data for years, even when parents never completed account setup. The settlement required Microsoft to implement new parental consent procedures and notify parents about child-specific privacy protections.