Microsoft added two sentences to its Privacy Statement on March 5, 2026, stating that it has updated its data retention policy to reflect new regulatory requirements effective March 2026, and that users in the European Economic Area will have additional rights under this updated policy. The updated language does not specify what those additional rights are, what the retention policy changes entail, or how they differ from prior practice. This represents a disclosure of policy change rather than a detailed operational modification.
The updated policy statement discloses that Microsoft has modified its data retention practices to comply with regulatory requirements effective in March 2026, and that users located in the European Economic Area will have additional rights under the revised policy. The added language does not specify what those rights are, what retention periods have changed, or how the updated policy operationally differs from the prior version. To understand the specific implications, users in the EEA would need to review the detailed retention policy terms or contact Microsoft for clarification on what additional rights have been granted.
→ Review Microsoft's detailed data retention policy to understand what specific rights have been granted and what retention periods now apply
→ If you are an EEA resident, contact Microsoft support to request clarification on which additional rights apply to your account
Discloses alignment with March 2026 regulatory requirements and additional rights for EEA users, but does not detail what has changed.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
Microsoft added a notice to its Privacy Statement disclosing an updated data retention policy aligned with March 2026 regulatory requirements and stating that EEA users have additional rights. The addition itself does not enumerate those …
Regulatory exposure, obligation change, escalation trigger, board-ready language, and recommended action for legal and compliance teams.
Unlock the full institutional analysis — InsightConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-001118.
Microsoft updated its privacy statement in an update detected on September 10, 2026, restructuring how it describes Copilot data usage …
Microsoft updated its Responsible AI landing page in an update detected on September 2, 2026. The document changed its reference …
Microsoft updated its Responsible AI page in an update detected on September 2, 2026. The 2025 RAI Transparency Report reference …
We read the privacy policies and terms of service of 38 AI platforms. Here is what they say about training, retention, arbitration, and lia…
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Get alerted when this policy changes again, including what changed and why it matters.