Microsoft updated its Privacy Statement in March 2026 with two substantive changes: removal of language describing additional rights for European Economic Area users, and addition of language authorizing contact via auto-dialer and prerecorded voice for marketing purposes if users consent to phone communication. The removal of EEA-specific rights language represents a narrowing of stated protections in that region, while the marketing contact provision establishes explicit permission to use automated calling technology.
The updated Privacy Statement removes previously stated language about additional rights available to European Economic Area users, narrowing the policy's explicit protections in that region. Simultaneously, the revised terms now explicitly authorize Microsoft to contact users via auto-dialer and prerecorded voice for marketing purposes, provided the user has consented to receive marketing communications to the phone number supplied. This establishes Microsoft's contractual permission to initiate automated marketing calls using artificial intelligence-generated voice technology where user consent to marketing contact has been given.
The updated policy establishes explicit authorization for Microsoft to initiate automated marketing calls using AI-generated voice technology where user consent to phone marketing has been given. This creates operational implications for users who provide phone numbers and have opted into marketing contact: they may now receive calls from automated systems. Simultaneously, the removal of language describing EEA user rights narrows the explicit protections stated in the policy for that region, which may have regulatory implications if those rights represented statutory disclosures rather than contractual commitments.
→ Review your Microsoft account settings to confirm whether you have provided a phone number and enabled marketing contact preferences
→ If you do not wish to receive automated marketing calls, adjust your marketing communication settings or contact Microsoft to revoke consent to phone marketing
→ If you have consented to receive marketing communications to your phone number, the terms will authorize Microsoft to contact you via auto-dialer and prerecorded voice as stated in the updated policy
→ EEA residents will no longer see explicit policy language describing additional rights previously referenced in the statement
ConductAtlas has recorded 2 material changes to this document (since March 2026). An additional minor or cosmetic changes were excluded.
2 of Microsoft's significant changes have been classified as negative for consumers.
Language stating EEA users have additional rights under the updated policy has been removed.
New provision authorizes contact via auto-dialer and prerecorded voice for marketing communications where user consents to marketing contact via phone number.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
If you agree to receive marketing calls at your phone number, Microsoft may now legally call you using automated systems and AI-generated voice messages.
The policy no longer explicitly states that European Economic Area residents have additional legal protections or rights.
The policy change involves removal of EEA user rights language and addition of auto-dialer marketing contact authorization. The removal of EEA-specific rights language may create regulatory exposure under GDPR, particularly if those rights referenced in the prior version are statutory entitlements rather than contractual grants. The auto-dialer provision engages FTC Telephone Consumer Protection Act standards, which restrict autodialed and prerecorded marketing calls and require prior express written consent. Organizations deploying this policy need to confirm: (1) whether the removed EEA rights language represented statutory disclosures or policy commitments, and (2) whether the consent collection and documentation for auto-dialer calls meets TCPA and applicable national telemarketing regulations.
GDPR (GDPR Articles 13-14, 21-22, and relevant ICO guidance on data subject rights), TCPA (Telephone Consumer Protection Act, 47 U.S.C. 227), EU Electronic Commerce Directive 2002/58/EC (concerning prior consent for electronic marketing), CCPA (California Consumer Privacy Act, to extent it applies to marketing calls), national telemarketing regulations (various EU member states)
Full compliance analysis
Obligation analysis, escalation trigger, board language, and recommended action.
Watcher: regulatory citations + obligations. Professional: full compliance memo.
ConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-001123.
See the full side-by-side comparison of every sentence added, removed, and modified.
🔒 Full diff — WatcherMicrosoft updated three passages in its Responsible AI Principles on April 19, 2026. The first change revised the opening tagline …
Microsoft updated three phrases in its Responsible AI document. The opening tagline changed from 'Build your business with trustworthy AI' …
Microsoft modified its data retention policy language on April 19, 2026. Previously, the policy described specific retention criteria including whether …
Get alerted when this policy changes again — including what changed and why it matters.
Prefer a weekly summary instead?
Get the biggest policy changes across 320+ platforms every Sunday.