Data Sharing with Microsoft Affiliates

What it is

LinkedIn defines its affiliates to include Microsoft Corporation and all of Microsoft's subsidiaries, such as GitHub, and the agreement authorizes sharing member data with these entities.

Why it matters (compliance & governance perspective)

The agreement's affiliate definition explicitly encompasses Microsoft Corporation and its subsidiaries including GitHub, meaning member personal data and professional activity data may be shared with a broad set of affiliated companies beyond LinkedIn itself.

Clause Stability Stable

Consumer impact (what this means for users)

Member personal data, professional profile information, content, and activity data may be shared with Microsoft Corporation and its subsidiaries under the agreement's affiliate data-sharing provisions; the specific categories of data shared and the purposes for sharing are governed by the Privacy Policy rather than the User Agreement alone.

What you can do

Institutional analysis (Compliance & governance intelligence)

1) REGULATORY LANDSCAPE: Data sharing with Microsoft affiliates across international borders engages GDPR Chapter V provisions on international data transfers for EU/EEA/Swiss users, with LinkedIn Ireland as the responsible data controller. The Privacy Shield framework's invalidation means transfers to US-based Microsoft entities must rely on Standard Contractual Clauses or other approved transfer mechanisms. CCPA's disclosure requirements regarding data sharing with third parties are relevant for California users. 2) GOVERNANCE EXPOSURE: Medium. The breadth of the affiliate definition, explicitly naming Microsoft and all its subsidiaries, creates a large potential recipient ecosystem for member data. The specific data categories shared, the purposes, and the safeguards applied are described in the Privacy Policy rather than the User Agreement, which limits the ability to assess the full scope from this document alone. 3) JURISDICTION FLAGS: EU/EEA/Swiss users should review LinkedIn's EU Notice for details on international transfer mechanisms applicable to Microsoft affiliate data sharing. California residents should review LinkedIn's California Privacy Disclosure for CCPA-specific disclosures about data sharing. UK users should review applicable UK GDPR transfer provisions. 4) CONTRACT AND VENDOR IMPLICATIONS: Organizations deploying LinkedIn for enterprise purposes should assess whether employee data shared through LinkedIn may flow to Microsoft affiliates in ways that create conflicts with internal data governance policies or client confidentiality obligations. GitHub's inclusion in the affiliate definition is notable for technology sector employers whose staff may have GitHub accounts or post code-related content. 5) COMPLIANCE CONSIDERATIONS: Compliance teams should update data flow maps to reflect LinkedIn as a data sharing point with Microsoft's affiliate network. Data Protection Impact Assessments for LinkedIn use cases may need to account for data flows to Microsoft affiliates. Organizations subject to sector-specific data regulations (financial services, healthcare) should assess whether LinkedIn data sharing with Microsoft affiliates creates compliance obligations.

Applicable agencies

Applicable regulations

Provision details

Other risks in this policy

• Broad Content License Including AI and ML Training high
• Mandatory Individual Arbitration and Class Action Waiver high
• Limitation of Liability Cap medium
• Unilateral Contract Modification with Continued-Use Consent medium
• Service Eligibility and Minimum Age medium
• Designated Countries Controller and GDPR Structure medium

Related Analysis

• Meta Removed 438 Sentences From Its Privacy Policy. Here Is What Disappeared.

  ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them to separate documents.

• 23andMe Is Bankrupt. What Happens to Your DNA Now?

  Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.