Microsoft Privacy Statement (Legacy)

This document is the Microsoft Privacy Statement (last updated March 2026), governing the collection, use, and sharing of personal data across Microsoft's consumer and enterprise products, services, websites, and applications, with legal bases including consent, contract performance, legitimate interests, and legal obligation depending on jurisdiction. The statement authorizes collection of identifiers, device and configuration data, browsing and search history, location data, voice and audio recordings, content and communications data, and inferences drawn from these categories; it also authorizes use of this data for product improvement, personalization, advertising, security, and AI model development, and sharing with subsidiaries, affiliates, advertising partners, analytics providers, and other third parties as described. Notably, the statement covers a broad spectrum of Microsoft products simultaneously under a single umbrella document, including AI and Copilot capabilities, enterprise services, consumer productivity apps, gaming (Xbox), and health-related features, creating jurisdiction-dependent variation in how specific provisions apply; the document asserts data use for AI and Copilot improvement and personalization, which may engage emerging regulatory frameworks in ways the statement does not fully resolve. The statement explicitly references GDPR applicability for EU and UK users, CCPA and U.S. state privacy law applicability for qualifying residents, and COPPA-related protections for children under 13; Microsoft's EU and UK Data Protection Officer contact is disclosed, and the statement describes standard mechanisms such as data subject access requests, deletion rights, and opt-out controls available through the Microsoft Privacy Dashboard and account settings.