Microsoft substantially reorganized and rewrote its privacy statement on June 26, 2026. The company removed detailed explanations of specific third-party data sources it previously disclosed (data brokers, public social media posts, location services, co-branded partners, and developers), replaced them with more general language about data collection, and restructured the document's table of contents and navigational framework. The privacy statement now discloses less specific information about how Microsoft obtains data from third parties, though the company states it has 'refreshed' the document to make it 'easier to read, navigate, and understand.'
Consumers: You no longer receive a specific list of the types of outside companies or sources Microsoft uses to obtain data about you; instead, you see only general statements about third-party data.
The updated privacy statement removes the previous detailed list of third-party sources from which Microsoft obtains personal data, including data brokers, public social media posts, location service providers, co-branded partners, and developers. Under the revised language, Microsoft describes obtaining data from 'Microsoft affiliates, subsidiaries, and third parties' without specifying the categories or types of third parties as explicitly as before. The company states it has reorganized the document for greater clarity and accessibility, but the operational effect is that users receive less specific disclosure about where their data originates from outside Microsoft.
This is the 3rd significant Transparency Removal change Microsoft has made since ConductAtlas began monitoring.
ConductAtlas has recorded 5 material changes to this document over 112 days of monitoring (since March 2026). An additional minor or cosmetic changes were excluded.
5 of Microsoft's significant changes have been classified as negative for consumers.
Removed detailed list of third-party data sources (data brokers, social media sites, location services, developers); replaced with general statement about obtaining data from third parties.
Reorganized table of contents and section headings; renamed 'Reasons we share personal data' to 'Reasons we disclose personal data' and 'Where we store and process personal data' to 'Storage and processing of personal data'.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
Microsoft removed granular disclosures of third-party data sources (data brokers, public social media sites, location services, developer partners) and replaced them with consolidated, less-specific language about obtaining data from third parties generally. This change affects …
Regulatory exposure, obligation change, escalation trigger, board-ready language, and recommended action for legal and compliance teams.
Unlock the full institutional analysis — InsightConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-003269.
Microsoft updated its Privacy Statement in an update detected on August 1, 2026, making changes primarily to document structure, formatting, …
Microsoft's privacy policy table of contents was updated on June 30, 2026, with a single sentence modification. The specific textual …
Microsoft's Privacy Statement table of contents was reorganized on June 28, 2026. Several product and feature references were relocated or …
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Get alerted when this policy changes again, including what changed and why it matters.