Yes, Amazon secretly kept children’s voice recordings from Echo Dot Kids devices indefinitely, even after parents requested deletion. In May 2023, the Federal Trade Commission and Department of Justice announced a $25 million settlement against Amazon for violating the Children’s Online Privacy Protection Act (COPPA), the federal law designed to protect children’s privacy online. The violation wasn’t limited to one careless mistake—Amazon maintained voice recordings across multiple internal databases, meaning that even when records were deleted from one system, they remained accessible to thousands of employees in others.
The severity of this breach extended far beyond the technical details. Amazon gave approximately 30,000 employees access to voice recordings of children using Echo Dot Kids, including employees who had no legitimate business reason to hear these recordings.
Table of Contents
- Why Did Amazon Keep Children’s Voice Recordings Without Permission?
- How Did Amazon Keep the Data Hidden Even After Deletion Requests?
- Who Could Access Your Child’s Voice Recordings?
- What Did the FTC Settlement Require Amazon to Do?
- Who Can File a Claim and How Much Compensation Is Possible?
- What Changes Has Amazon Made Since the Settlement?
- What Does This Case Mean for Smart Speakers and Children’s Data?
- Frequently Asked Questions
Why Did Amazon Keep Children’s Voice Recordings Without Permission?
Amazon’s fundamental violation centered on a pattern of collecting and retaining children’s voice data without explicit parental consent. When parents purchased Echo Dot Kids devices, Amazon was supposed to delete voice recordings when requested, but the company maintained an indefinite retention policy. For example, a parent who carefully deleted their child’s voice history through the app had no way to know that Amazon was keeping that same voice data in backend systems and logging databases.
The violation occurred because Amazon treated children’s accounts like adult accounts—applying business practices designed for adult users to minors, even though COPPA establishes stricter requirements. Amazon did not provide parents with clear notice about what data was being collected, how long it would be kept, or who could access it. This lack of transparency violated the core principles of COPPA, which requires companies to be explicit about collecting children’s personal information and to get parental consent before doing so.
How Did Amazon Keep the Data Hidden Even After Deletion Requests?
The mechanics of the violation reveal a critical database management failure. When parents requested deletion of their child’s voice recordings, amazon deleted the files from some databases—making it appear the deletion was complete—but maintained the same recordings in other internal systems. This fragmentation meant that voice data persisted even when the company claimed to have honored deletion requests.
However, if a parent checked the app immediately after requesting deletion, they saw confirmation that the data was gone, creating a false sense of security. Meanwhile, Amazon continued analyzing, storing, and accessing those recordings in separate logging systems. The company had no unified process to locate and delete children’s data across all systems where it was stored. This wasn’t an oversight—it was a systemic failure that affected millions of children whose voice recordings remained in Amazon’s possession far longer than parents believed.
Who Could Access Your Child’s Voice Recordings?
The breadth of access is the most troubling aspect of this violation. Approximately 30,000 Amazon employees had the ability to listen to children’s voice recordings, including transcriptions of what children said to their Echo Dot devices. Many of these employees worked in customer service, quality assurance, and other departments where accessing voice recordings wasn’t necessary for their job functions.
For instance, a customer service representative handling a billing dispute had the same access to a child’s voice recording as an engineer working on Alexa’s speech recognition system. Amazon did not implement proper access controls or require employees to have a documented business reason before accessing children’s voice data. This meant that in addition to the violation of retaining the data itself, Amazon created a secondary violation by allowing widespread employee access without appropriate oversight or restrictions. The company only documented reviews of “a small percentage” of voice recordings, offering no accountability for most of the 30,000 employees with access.
What Did the FTC Settlement Require Amazon to Do?
The $25 million settlement, announced May 31, 2023, included specific remediation requirements that Amazon must now follow. The company must identify and automatically delete voice recordings associated with child accounts that have been inactive for 18 months or longer, unless a parent explicitly requests that Amazon retain the data. This creates an automatic cleanup mechanism that didn’t exist before.
Amazon must also provide parents with clear, truthful disclosures about what voice recordings are collected, how long they’re retained, and who can access them. The company was required to notify parents about changes to these practices going forward. The settlement represents a starting point for compliance rather than the end of accountability—parents filing class action lawsuits separately from the FTC settlement have pursued additional compensation for the privacy violation itself.
Who Can File a Claim and How Much Compensation Is Possible?
Eligibility for class action compensation depends on whether your child’s account was affected during the period Amazon was violating COPPA. Class action lawsuits have been filed in eight states: Florida, Illinois, Maryland, Massachusetts, Michigan, New Hampshire, Pennsylvania, and Washington. These state-level lawsuits pursue damages for the privacy violation itself, separate from the FTC settlement. However, compensation amounts vary significantly by jurisdiction and claim type.
Some settlements offer per-child payments ranging from modest amounts to several hundred dollars depending on the specific lawsuit and state laws. The challenge for parents is that settlement notices may appear in email, come as mailings, or be available through the claims administrator’s website. If you don’t submit a claim by the deadline, you forfeit compensation even if your child was directly affected. You should check with the claims administrator for your state’s lawsuit to determine if you’re eligible and to submit before the deadline passes.
What Changes Has Amazon Made Since the Settlement?
Beyond the automatic deletion requirement, Amazon updated its privacy practices for Echo Dot Kids. The company now provides parents with more granular controls over how voice recordings are used and retained. Parents can delete voice records individually or in bulk, and Amazon displays the retention status more transparently in the app.
The settlement also included provisions for independent auditing of Amazon’s compliance with the remediation requirements. Third-party auditors must verify that Amazon is following through on deleting inactive account data and maintaining proper access controls. For example, auditors check that the company’s employees no longer have uncontrolled access to children’s voice recordings. These accountability measures address the gaps that made the original violation possible.
What Does This Case Mean for Smart Speakers and Children’s Data?
The Amazon case serves as a warning about how easily children’s privacy can be violated when companies prioritize data collection over compliance. Smart speakers, smartwatches, and other connected devices marketed to children collect sensitive voice and activity data that many parents don’t fully understand is being retained and accessed.
This settlement may prompt other device makers to review their own retention and access policies, but the lack of comprehensive federal guidance means different standards may apply across companies. Looking forward, this case highlights the need for stronger enforcement of COPPA and potentially new rules addressing employee access to children’s data. As companies like Amazon manage larger datasets involving minors, the question of who can access that data and for how long becomes increasingly important to children’s privacy and safety.
Frequently Asked Questions
Does the FTC settlement mean I don’t need to file a class action claim?
No. The FTC settlement is separate from class action lawsuits filed on behalf of consumers. The FTC settlement addressed Amazon’s conduct and established compliance requirements, but class action lawsuits pursue direct compensation to affected families for the privacy violation itself.
How do I know if my child’s voice recordings were actually accessed by Amazon employees?
Amazon did not disclose which specific accounts were accessed or reviewed. However, if your child had an Echo Dot Kids account during the period when Amazon was retaining recordings (which the company did for years), your child’s data was vulnerable to access given that 30,000 employees had the capability to review recordings.
Can I sue Amazon separately on top of joining the class action?
Once you join and accept a settlement from a class action lawsuit, you typically waive your right to sue Amazon separately for the same violation. However, different state lawsuits have different settlement terms, so it’s important to review the terms of the specific lawsuit in your state before accepting the settlement.
What should I do with my child’s Echo Dot device now?
Amazon has improved its privacy practices, but if you’re concerned about voice recording, you have several options: disable the microphone when not in use, delete voice recordings manually through the app on a regular basis, or switch to a competing device with stronger privacy controls. The settlement doesn’t require you to stop using the device.
If my child’s account was inactive, will Amazon automatically delete the data?
Yes, as part of the settlement remediation, Amazon is automatically deleting voice recordings associated with accounts that have been inactive for 18 months or longer. You don’t need to request this deletion—it happens automatically unless you’ve explicitly told Amazon to keep the data.
What happens if I miss the deadline to file a class action claim?
Missed deadlines are generally final. You forfeit your opportunity to receive settlement compensation, even if you were directly affected by the privacy violation. Check the claims administrator’s website immediately to confirm the deadline for your state’s lawsuit.
You Might Also Like
- Class Action Claims Amazon Ring Allowed Law Enforcement Backdoor Access Without Disclosure
- Class Action Claims iRobot Roomba Cameras Photographed Intimate Moments and Shared Data
- Class Action Claims World Finance Corp Made Repeated Loan Refinances to Extract Higher Fees