California residents have specific rights under CCPA, including the right to know what personal data Microsoft collects, to delete it, and to opt out of the sale or sharing of their personal information for advertising purposes.
California residents have stronger legal rights than most US consumers regarding their personal data, and Microsoft is required by law to honour these rights upon request.
CCPA/CPRA compliance requires businesses meeting statutory thresholds to provide opt-out of sale/sharing, honour deletion requests within 45 days, and avoid discrimination against consumers who exercise rights. Microsoft's statement indicates these rights are available, but compliance teams should verify that fulfilment mechanisms meet CPRA's updated requirements including sensitive personal information opt-out rights.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.
Microsoft collects extensive personal data across its products including search history, voice recordings, location data, browsing behaviour, and inferred interests, and uses this data for targeted advertising and product improvement. Users' data may be shared with affiliates, advertising partners, and other third parties, and sensitive data such as health and biometric information may also be collected in certain contexts. You can review, download, or delete your personal data by visiting Microsoft's Privacy Dashboard at account.microsoft.com/privacy.