Xbox · Xbox Privacy Statement

Xbox Children's Data and Parental Consent

High severity
Share 𝕏 Share in Share 🔒 PDF

What it is

When a child uses Xbox, Microsoft collects their gameplay data, voice communications, and social interactions — but requires parental consent and provides parents with controls through Microsoft Family Safety.

Consumer impact (what this means for users)

Child Xbox users' voice communications, gameplay behavior, and social interactions are collected by Microsoft and are subject to parental controls that must be actively configured through Microsoft Family Safety — parents who do not set these controls may not be aware of the scope of data collection from their children's accounts.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    Sign in to the parent Microsoft account at account.microsoft.com/privacy, navigate to Family Safety settings, select the child's account, and review privacy controls and data collection settings. You can also delete child account data from the Privacy Dashboard.

Cross-platform context

See how other platforms handle Xbox Children's Data and Parental Consent and similar clauses.

Compare across platforms →
Need full compliance memos? See Professional →

Why it matters (compliance & risk perspective)

Xbox is heavily used by children and the data collected from child accounts — including voice and social interaction data — is particularly sensitive, and parents need to actively manage Family Safety settings to protect their children.

View original clause language
For children's accounts, Microsoft requires verifiable parental consent before collecting personal data from children under the applicable age of digital consent. Xbox uses Microsoft Family Safety to allow parents to manage their child's gaming experience, including communications, content, and privacy settings. Microsoft collects data from child accounts including gameplay data, voice communications, and social interactions, subject to parental consent and applicable law.

Institutional analysis (Compliance & legal intelligence)

REGULATORY FRAMEWORK: This provision directly implicates COPPA (15 U.S.C. §6501 et seq., 16 C.F.R. Part 312) requiring verifiable parental consent for personal data collection from children under 13, enforced by the FTC; GDPR Art. 8 (children's consent, age of digital consent varies by member state, 13–16); UK Age Appropriate Design Code (Children's Code) enforced by the ICO; and CCPA/CPRA provisions on minors under 16 (Cal. Civ. Code §1798.120(c)).

🔒

Compliance intelligence locked

Regulatory citations, enforcement risk, and due diligence action items.

Watcher $9.99/mo Professional $149/mo

Watcher: regulatory citations. Professional: full compliance memo.

Applicable agencies

  • FTC
    The FTC enforces COPPA (16 C.F.R. Part 312) and has primary jurisdiction over children's personal data collection practices on gaming platforms like Xbox.
    File a complaint →

Provision details

Document information
Document
Xbox Privacy Statement
Entity
Xbox
Document last updated
April 29, 2026
Tracking information
First tracked
April 27, 2026
Last verified
April 27, 2026
Record ID
CA-P-003191
Document ID
CA-D-00018
Evidence Provenance
Source URL
Wayback Machine
SHA-256
a67035af599dcfcefd7a22ae7c70147370fe6651cb96942500cd2ead91f2a017
Verified
✓ Snapshot stored   ✓ Change verified
How to Cite
ConductAtlas Policy Archive
Entity: Xbox | Document: Xbox Privacy Statement | Record: CA-P-003191
Captured: 2026-04-27 09:55:26 UTC | SHA-256: a67035af599dcfce…
URL: https://conductatlas.com/platform/xbox/xbox-privacy-statement/xbox-childrens-data-and-parental-consent/
Accessed: May 2, 2026
Classification
Severity
High
Categories

Other provisions in this document