Disney has agreed to pay a $10 million fine and implement compliance measures after allegations of violating child privacy laws, specifically the Children's Online Privacy Protection Act, related to its YouTube operations and collection of data from children viewing kid-directed videos.
Microsoft has agreed to pay $20 million to the FTC for illegally collecting personal information from children on Xbox consoles without their parents' consent. The Xbox sign-up process violated the Children's Online Privacy Protection Act by collecting children's personal information without notifying their parents and getting their permission. Xbox was also accused of illegally retaining children's personal information, something the company has admitted and described as a "technical glitch". The proposed order will require Microsoft to bolster protections for children and make clear that avatars generated from kids' image and biometric and health data are protected under the Children's Online Privacy Protection Act.