Ouch! According to the Federal Trade Commission, Microsoft violated consent and data retention requirements of the U.S. COPPA privacy legislation by requiring children under 13 to provide their first and last names, email addresses, dates of birth, and phone numbers. The confidential data was shared *by default* with advertisers and third-party developers. The information and underage children's unique persistent identifiers were retained even if parents withheld consent by not completing the registration process.

Click to read referenced article: Microsoft to Pay $20 Million Penalty for Illegally Collecting Kids' Data on Xbox (thehackernews.com)