Amazon settles with the US DOJ and the FTC for $25M over not complying with parents' requests to delete their kids' Alexa voice recordings and geolocation data
Sergiu Gatlan / BleepingComputer :
Context & Ripple Effects
This settlement closes a case that unfolded in public stages: in April, Politico reported the FTC was preparing a COPPA complaint alleging Alexa speakers collected data on kids under 13 without parental consent, and by early June Amazon had agreed to pay $25M, per the New York Times' coverage of the settlement agreement. The DOJ and FTC have now finalized it, with the core allegation being that Amazon kept children's voice recordings and geolocation data for years and failed to honor parents' deletion requests.
It is also a bookend to a longer legal arc around Alexa's audio: back in 2017, Amazon dropped a bid to extend First Amendment protections to Alexa commands and captured audio in a murder trial. The throughline is that courts and regulators keep treating Alexa recordings as ordinary, regulated user data rather than speech Amazon can shield.
First-order effects
- Amazon pays a $25M civil penalty and is now on the hook for actually executing parents' deletion requests for kids' voice recordings and geolocation data — the violation was non-compliance, not collection itself.
- Parents of children under 13 with Alexa-enabled devices get enforceable deletion rights over that data, with the FTC and DOJ as the enforcement backstop.
Second-order effects
- Rival voice-assistant vendors — Google and Microsoft among them — face pressure to audit their own children's-data retention and deletion workflows before the FTC applies the same COPPA theory to their products.
- Compliance engineering for kids' data (deletion pipelines, retention limits) becomes a budgeted cost across the smart-speaker and connected-toy market, not an optional feature.
Third-order effects
- The case signals the FTC is willing to use COPPA against ambient, always-listening hardware, not just websites and apps — pushing the industry toward retention minimization as a design default for any device that records children.
- If the enforcement pattern holds, deletion-on-request becomes table stakes for kids' voice data, shifting the burden of proof onto device makers to show they honor it.
The trend: Regulators are extending children's privacy enforcement from websites into always-listening hardware, making verifiable data deletion a baseline requirement for voice assistants.