Microsoft · Microsoft Privacy Statement (Legacy) · View original document ↗

Collection of Data from Children

Medium severity High confidence Explicitdocumentlanguage Unique · 0 of 325 platforms
Share 𝕏 Share in Share 🔒 PDF
Recent governance activity Microsoft recorded 3 documented changes in the last 30 days.
Start monitoring updates
Monitor governance changes for Microsoft Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.

This analysis describes what Microsoft's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

Parents and guardians should know that creating a Microsoft account for a child requires their active consent, and that Microsoft's family tools include mechanisms to manage and supervise a child's account and data.

Recent Activity

This document changed recently

Medium Apr 19, 2026

The updated policy establishes additional grounds on which Microsoft may retain personal data. While the prior version tied retention to specific user expectations and available deletion controls, th…

Medium Apr 1, 2026

The updated policy now grounds data retention in five broad business purposes: operating the business, meeting contractual and legal obligations, improving and developing products and services, prote…

Medium Mar 13, 2026

The updated Privacy Statement removes previously stated language about additional rights available to European Economic Area users, narrowing the policy's explicit protections in that region. Simulta…

Consumer impact (what this means for users)

The statement authorizes Microsoft to collect a wide range of personal data including identifiers, location, voice and audio recordings, browsing and search history, and content created within Microsoft products, and to use this data for advertising, product personalization, and AI model improvement across its product portfolio. EU and UK users have GDPR-based rights including access, correction, deletion, and objection to processing, while California and other U.S. state residents have rights under applicable state privacy laws including the right to opt out of data sales or sharing for targeted advertising. You can access, review, download, or delete your personal data and adjust advertising and personalization settings at account.microsoft.com/privacy.

How other platforms handle this

Replit Medium

Replit does not knowingly collect personal information from children under 13. Users between the ages of 13 and 18 may use the platform with parental or guardian consent. If we learn we have collected personal information from a child under 13 without verification of parental consent, we will delete...

FanDuel Medium

If you would like to opt out of the disclosure of your personal information for purposes that could be considered "sales" for those third parties' own commercial purposes, or "sharing" or processing for purposes of targeted advertising, please visit the following link, which is also available in the...

Zendesk Medium

Zendesk complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. When Zendesk transfers personal data from the EU, UK, or Switzerland to the United ...

See all platforms with this clause type →

Monitoring

Microsoft has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
Microsoft products are intended for use by adults. For products directed to children or where the user is identified as a child, Microsoft will take additional steps to protect the child's personal data. When a Microsoft account is created for a child, a parent or guardian must consent to the creation of the account and to the collection and use of the child's data. Microsoft does not knowingly collect personal data from children under age 13 without parental consent. If we learn we have collected personal data from a child under age 13 without parental consent, we will delete it.

— Excerpt from Microsoft's Microsoft Privacy Statement (Legacy)

Applicable regulations

EU AI Act
European Union
BIPA
Illinois, USA
CCPA/CPRA
California, USA
Colorado AI Act
US-CO
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
TCPA
United States Federal
UK GDPR
United Kingdom
Universal Opt-Out Mechanism Expansion 2026
US
VPPA
United States Federal

Provision details

Document information
Document
Microsoft Privacy Statement (Legacy)
Entity
Microsoft
Document last updated
March 5, 2026
Tracking information
First tracked
April 28, 2026
Last verified
May 12, 2026
Record ID
CA-P-008962
Document ID
CA-D-00001
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
9e697464d17b7148c787f07099c60e30370abb2b13a7f2a910f607e31ec13158
Analysis generated
April 28, 2026 08:11 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Microsoft
Document: Microsoft Privacy Statement (Legacy)
Record ID: CA-P-008962
Captured: 2026-04-28 08:11:57 UTC
SHA-256: 9e697464d17b7148…
URL: https://conductatlas.com/platform/microsoft/microsoft-privacy-statement-legacy/collection-of-data-from-children/
Accessed: May 13, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Professional Governance Intelligence

Need to monitor specific governance provisions?

Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Professional free trial

Or start with Watcher →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Microsoft's Collection of Data from Children clause do?

Parents and guardians should know that creating a Microsoft account for a child requires their active consent, and that Microsoft's family tools include mechanisms to manage and supervise a child's account and data.

Is ConductAtlas affiliated with Microsoft?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Microsoft.