Children under 13 are a protected class under COPPA, and if Microsoft's parental consent mechanisms are insufficient or if data collection from child accounts exceeds what is permitted, both Microsoft and parents face legal exposure, and children's data may be at risk.
Microsoft collects a broad range of personal data across Xbox and all its products, including voice data, precise location, gaming history, payment details, and behavioral inferences, which are shared across Microsoft's product family and used for advertising and AI model improvement. Minors using Xbox are subject to specific parental consent controls, but the breadth of data collection across interconnected Microsoft services means that even child accounts generate significant data profiles. You can review, download, and delete your personal data by visiting your Microsoft Privacy Dashboard at https://account.microsoft.com/privacy.