A new class-action lawsuit filed in Washington state accuses Microsoft of running a massive student-data harvesting operation through its educational software. The complaint alleges that the tech giant collects detailed records of behavior history and physical typing telemetry from more than one million K-12 students who use its products for school.
What Happened
According to the Washington state class-action lawsuit, the data collection occurs through widely used platforms including Windows, the Edge browser, Microsoft 365 Education, and Minecraft Education. The plaintiffs, a group of four Washington school children represented by their legal guardian, claim that Microsoft aggregates this information into persistent digital profiles used to predict academic performance and emotional states.
The lawsuit points to Microsoft Teams' 'Reflect' feature, a social-emotional check-in tool where students share feelings of anxiety or stress. The complaint argues these mood logs qualify as consumer health data under Washington's My Health My Data Act, which requires parental consent before collection. This is not Microsoft's first regulatory challenge involving children's data. In 2023, the company agreed to pay a $20 million penalty to the Federal Trade Commission to resolve allegations of unlawfully collecting children's personal information. In October 2025, the Austrian Data Protection Authority ruled that Microsoft 365 Education violated European privacy laws by tracking students without consent.
The Bigger Picture
The dispute over school-issued software extends far beyond Microsoft. A 2026 study by Brigham Young University researchers found that 52% of popular K-12 educational apps collected student data, with 36% sharing that information with outside advertisers. This tracking has prompted some states, including Utah, to pass strict new legislative protections for student digital footprints.
Other major educational platforms face similar legal scrutiny. For example, a class-action lawsuit in California alleges that the digital learning program i-Ready tracks students' erratic mouse movements and behavioral timing to build diagnostic profiles. This tracking has caused a significant backlash, leading major school districts in Los Angeles and Nevada to scale back classroom screen time and re-evaluate edtech contracts.
Many of these privacy challenges stem from the rapid transition to remote learning during the COVID-19 pandemic. At that time, school IT departments rushed to deploy platforms like Microsoft Teams without fully configuring their highly complex privacy settings.
What This Means for Families
For parents and educators, the lawsuit shows that classroom software is rarely a passive learning aid. When schools mandate the use of digital tools, children become captive participants in commercial data collection. While school districts often try to vet software, sometimes using teacher-led software pilot programs, the hidden tracking mechanisms of major tech platforms remain difficult for local school boards to detect and control on their own.
What You Can Do
To protect student data, parents can ask school administrators for written confirmation of how they configure privacy settings on mandated software platforms like Microsoft 365 or Teams. You can also speak with teachers about disabling optional behavioral or emotional check-in tools, such as the Reflect feature, if they are not core to the academic curriculum. Finally, if your child uses a personal computer or tablet for schoolwork, you can restrict data sharing by adjusting the operating system's diagnostic and telemetry settings.