CA-C-001837
Microsoft — Microsoft Privacy Statement (Legacy)
Entity
Date detected
March 5, 2026
Effective date
March 5, 2026
Severity
Direction
Negative
Affected users
all users US users
Taxonomy
Transparency removal
Changes
−1 sentence removed · 1 sentence modified
Share 𝕏 Share in Share 🔒 PDF
Watch Microsoft Get alerts when this policy changes.
Watch — Free

Event Summary

Microsoft removed a sentence from its privacy statement that described consent-based marketing contact via auto-dialer and prerecorded voice technology potentially generated using AI. The updated document no longer explicitly discloses this practice. The removal creates a gap between what the policy previously stated users might consent to and what it now describes about marketing contact methods.

MEDIUM

Consumer Impact

The updated privacy statement no longer explicitly describes the practice of contacting users for marketing purposes using auto-dialers, prerecorded voices, or AI-generated voice technology, even when the user has provided consent. Previously, the statement disclosed that such contact was possible if you consented to receive marketing communications to a phone number you provided. The removal of this language means the policy no longer contains explicit disclosure of this specific marketing contact method.

Governance Analysis

The removal of explicit disclosure language about a specific marketing contact practice (AI-generated voice auto-dialer calls) creates an absence where the policy previously acknowledged the possibility. For users accustomed to seeing this disclosure in Microsoft's terms, the removal signals a change in how the company describes its marketing practices. For compliance teams, the removal may trigger review of whether TCPA and FTC Act transparency obligations are still adequately addressed under the updated language, and whether vendor documentation needs to be refreshed.

If No Action Is Taken

The updated privacy statement will apply as written, with no explicit disclosure of AI-generated voice marketing contact methods.

Users will not see the prior language describing auto-dialer and prerecorded voice contact options in the current privacy statement.

Key Clauses Affected

marketing contact disclosure

Removed explicit description of AI-generated voice and auto-dialer marketing contact methods despite prior consent language.

Full clause-by-clause analysis available with Professional.
These clauses may change again. Get alerted when they do. Watch Microsoft — Free

This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology

Evidence Verification

✓ Verified
Previous Version
b00f93e97712c94234c217fb26263315378680077cada036ee4ced9e4b67b11c
March 13, 2026 06:00 UTC
✓ Verified
Current Version
b8c5474c7d089106c6ef8aa469baaab3d68c47dcaea7519ed1c518a26aa0c0fe
March 5, 2026 06:14 UTC
✓ Verified
Change Detected
March 5, 2026 06:14 UTC
Analysis Methodology
Citation Record
Entity: Microsoft
Document: Microsoft Privacy Statement (Legacy)
Record ID: CA-C-001837
Captured: 2026-03-05 06:14:34 UTC
URL: https://conductatlas.com/change/2026-03-05-microsoft-microsoft-privacy-statement-legacy-1837/
Accessed: May 13, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.

Impact Summary

1
Protection removed
Consumers Removed

The privacy statement no longer tells users that Microsoft may contact them for marketing using automated voices or AI-generated speech if they consent to receive marketing calls.

For legal and compliance teams

Institutional Analysis

Assessment

This change removes explicit disclosure language about marketing contact practices from the privacy statement. The removal may create compliance exposure under FTC Act Section 5 (unfair or deceptive practices), TCPA (Telephone Consumer Protection Act), and state-level marketing call regulations that may require clear prior disclosure of auto-dialer and prerecorded message practices. Organizations relying on Microsoft's privacy statement as part of their own data governance or vendor compliance documentation should evaluate whether this removal affects their transparency obligations to end users or their own compliance posture with telemarketing regulations.

Regulatory Exposure

FTC Act (Section 5, unfair or deceptive practices), TCPA (Telephone Consumer Protection Act), state telemarketing regulations, GDPR Article 21 (right to object to direct marketing)

Full compliance analysis

Obligation analysis, escalation trigger, board language, and recommended action.

Watcher $9.99/mo Professional $149/mo

Watcher: regulatory citations + obligations. Professional: full compliance memo.

ConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-001837.

Full Changes

See the full side-by-side comparison of every sentence added, removed, and modified.

🔒 Full diff — Watcher

Document Context

Version history → Policy drift analysis → Document page →
Document
Microsoft Privacy Statement (Legacy)
Entity
Microsoft
Captured
March 5, 2026
Source URL
https://www.microsoft.com/en-us/privacy/privacystatement
Other changes to Microsoft Privacy Statement (Legacy)
Next change Mar 5, 2026
Microsoft removed two sentences from its Privacy Statement on March 5, 2026. Without access to the specific sentences that were …
Low Neutral
View full version history →
More from Microsoft
Apr 19, 2026 Low
Microsoft Responsible AI Standard

Microsoft updated three passages in its Responsible AI Principles on April 19, 2026. The first change revised the opening tagline …

Apr 19, 2026 Low
Responsible AI

Microsoft updated three phrases in its Responsible AI document. The opening tagline changed from 'Build your business with trustworthy AI' …

Apr 19, 2026 Medium
Microsoft Privacy Statement (Legacy)

Microsoft modified its data retention policy language on April 19, 2026. Previously, the policy described specific retention criteria including whether …

Track Microsoft policy changes

Get alerted when this policy changes again — including what changed and why it matters.

Prefer a weekly summary instead?

Get the biggest policy changes across 320+ platforms every Sunday.