Under the agency's COPPA ruling, website that collect personal information on its young users must receive parental consent before doing so.
Under its new protocol, app developers are prohibited from selling users' personal health information.
Although Lizhong Fan left the U.S. in 2007, the agencies responsible for giving him access to Americans' personal information have yet to disclose the details of the case to the public.
The MS14-045 update caused some users' systems to crash, and in response, Microsoft pulled the update.
The bill would prevent companies from selling students' data and profiting from it.