Microsoft updated its Privacy Statement in March 2026 with two substantive changes: removal of language describing additional rights for European Economic Area users, and addition of language authorizing contact via auto-dialer and prerecorded voice for marketing purposes if users consent to phone communication. The removal of EEA-specific rights language represents a narrowing of stated protections in that region, while the marketing contact provision establishes explicit permission to use automated calling technology.
Consumers: If you agree to receive marketing calls at your phone number, Microsoft may now legally call you using automated systems and AI-generated voice messages.
Consumers: The policy no longer explicitly states that European Economic Area residents have additional legal protections or rights.
The updated Privacy Statement removes previously stated language about additional rights available to European Economic Area users, narrowing the policy's explicit protections in that region. Simultaneously, the revised terms now explicitly authorize Microsoft to contact users via auto-dialer and prerecorded voice for marketing purposes, provided the user has consented to receive marketing communications to the phone number supplied. This establishes Microsoft's contractual permission to initiate automated marketing calls using artificial intelligence-generated voice technology where user consent to marketing contact has been given.
→ Review your Microsoft account settings to confirm whether you have provided a phone number and enabled marketing contact preferences
→ If you do not wish to receive automated marketing calls, adjust your marketing communication settings or contact Microsoft to revoke consent to phone marketing
ConductAtlas has recorded 2 material changes to this document (since March 2026).
2 of Microsoft's significant changes have been classified as negative for consumers.
Language stating EEA users have additional rights under the updated policy has been removed.
New provision authorizes contact via auto-dialer and prerecorded voice for marketing communications where user consents to marketing contact via phone number.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
The policy change involves removal of EEA user rights language and addition of auto-dialer marketing contact authorization. The removal of EEA-specific rights language may create regulatory exposure under GDPR, particularly if those rights referenced in …
Regulatory exposure, obligation change, escalation trigger, board-ready language, and recommended action for legal and compliance teams.
Unlock the full institutional analysis — InsightConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-001123.
Microsoft updated its Privacy Statement in an update detected on August 1, 2026, making changes primarily to document structure, formatting, …
Microsoft's privacy policy table of contents was updated on June 30, 2026, with a single sentence modification. The specific textual …
Microsoft's Privacy Statement table of contents was reorganized on June 28, 2026. Several product and feature references were relocated or …
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Get alerted when this policy changes again, including what changed and why it matters.