Microsoft added two sentences to its Privacy Statement on March 5, 2026, stating that it has updated its data retention policy to reflect new regulatory requirements effective March 2026, and that users in the European Economic Area will have additional rights under this updated policy. The updated language does not specify what those additional rights are, what the retention policy changes entail, or how they differ from prior practice. This represents a disclosure of policy change rather than a detailed operational modification.
The updated policy statement discloses that Microsoft has modified its data retention practices to comply with regulatory requirements effective in March 2026, and that users located in the European Economic Area will have additional rights under the revised policy. The added language does not specify what those rights are, what retention periods have changed, or how the updated policy operationally differs from the prior version. To understand the specific implications, users in the EEA would need to review the detailed retention policy terms or contact Microsoft for clarification on what additional rights have been granted.
The updated language establishes that Microsoft has modified its data retention practices in response to regulatory requirements effective March 2026 and has granted additional rights to EEA users. This signals that the underlying data handling framework has changed, but the disclosure itself does not specify what those changes entail, leaving organizations and users without clear operational guidance on how their data will now be retained, processed, or deleted.
→ Review Microsoft's detailed data retention policy to understand what specific rights have been granted and what retention periods now apply
→ If you are an EEA resident, contact Microsoft support to request clarification on which additional rights apply to your account
→ The updated data retention policy will apply as written to your personal data processed by Microsoft
→ If you do not review the detailed retention terms, you may be unaware of what data deletion or access rights are now available to you under the policy
Discloses alignment with March 2026 regulatory requirements and additional rights for EEA users, but does not detail what has changed.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
Microsoft added a notice to its Privacy Statement disclosing an updated data retention policy aligned with March 2026 regulatory requirements and stating that EEA users have additional rights. The addition itself does not enumerate those rights or specify retention changes. For organizations subject to data processing agreements with Microsoft, this statement may signal that underlying vendor terms or data handling practices have been modified; compliance teams should request detailed disclosure of what has changed and verify that DPAs, SCCs, or other governing agreements reflect the updated retention and rights framework.
GDPR (General Data Protection Regulation), UK GDPR, possibly sector-specific data protection regulations effective in March 2026 in EEA jurisdictions.
Full compliance analysis
Obligation analysis, escalation trigger, board language, and recommended action.
Watcher: regulatory citations + obligations. Professional: full compliance memo.
ConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-001118.
See the full side-by-side comparison of every sentence added, removed, and modified.
🔒 Full diff — WatcherMicrosoft updated three passages in its Responsible AI Principles on April 19, 2026. The first change revised the opening tagline …
Microsoft updated three phrases in its Responsible AI document. The opening tagline changed from 'Build your business with trustworthy AI' …
Microsoft modified its data retention policy language on April 19, 2026. Previously, the policy described specific retention criteria including whether …
Get alerted when this policy changes again — including what changed and why it matters.
Prefer a weekly summary instead?
Get the biggest policy changes across 320+ platforms every Sunday.