Voice data is biometric-adjacent and is subject to strict state laws in Illinois (BIPA) and Texas (CUBI) that require written consent before collection and provide private rights of action.
Microsoft collects a broad range of personal data across Xbox and all its products, including voice data, precise location, gaming history, payment details, and behavioral inferences, which are shared across Microsoft's product family and used for advertising and AI model improvement. Minors using Xbox are subject to specific parental consent controls, but the breadth of data collection across interconnected Microsoft services means that even child accounts generate significant data profiles. You can review, download, and delete your personal data by visiting your Microsoft Privacy Dashboard at https://account.microsoft.com/privacy.