Microsoft · Microsoft Privacy Statement (Legacy)

Data Retention After Account Deletion

Medium severity
Share ๐• Share in Share

What it is

When you delete your Microsoft account, Microsoft may retain some of your personal data for a period of time before it is permanently deleted, and certain data may be retained longer for legal or business reasons.

Why it matters

Closing your Microsoft account does not mean your data is immediately erased; some information may persist in Microsoft's systems for weeks, months, or longer depending on the data type.

Institutional analysis (Compliance & legal intelligence)

Retention periods following account closure must comply with GDPR storage limitation principles (Art. 5(1)(e)) and CCPA deletion rights (ยง 1798.105); compliance teams should obtain Microsoft's data retention schedule and verify it aligns with organisational data minimisation obligations.

๐Ÿ”’

Compliance intelligence locked

Regulatory citations, enforcement risk, and due diligence action items.

Watcher $9.99/mo Professional $149/mo

Watcher: regulatory citations. Professional: full compliance memo.

Consumer impact

Microsoft collects extensive personal data โ€” including location, voice recordings, typed content, browsing history, and health-related data โ€” across its entire product ecosystem, and uses this data for personalised advertising, product improvement, and AI model training. Data may be shared with third-party partners, advertisers, and other Microsoft-affiliated companies, and some data may be retained even after account deletion. You can review, download, or delete your personal data by visiting account.microsoft.com/privacy and adjusting settings via the Microsoft Privacy Dashboard.

What you can do

โš ๏ธ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Close Your Account
    Sign in to account.microsoft.com, go to your profile settings, and select 'Close account'. Follow the steps to mark your account for closure; note that some data may be retained for up to 60 days before permanent deletion.

Applicable agencies

  • Federal Trade Commission (ftc)
    Oversees unfair or deceptive business practices and can investigate companies that mislead consumers about data collection, sharing, or use.
    Who can file: Anyone affected by the company's practices (US or international)
    What you need: Your account details, a timeline of relevant events, and a description of the specific issue
    What to expect: Complaints inform FTC enforcement priorities and investigations but do not result in individual resolution or compensation
    File a complaint →

Provision details

Document information
Document
Microsoft Privacy Statement (Legacy)
Entity
Microsoft
Document last updated
March 5, 2026
Tracking information
First tracked
March 6, 2026
Last verified
March 9, 2026
Record ID
CA-P-00001004
Document ID
CA-D-00001
Evidence Provenance
Source URL
Wayback Machine
SHA-256
b3c85aa6a19fc8ce1bad351ae60d82fbee162cdf439701bea9f0007ce7de8bc0
Verified
✓ Snapshot stored   ✓ Change verified
How to Cite
ConductAtlas Policy Archive
Entity: Microsoft | Document: Microsoft Privacy Statement (Legacy) | Record: CA-P-00001004
Captured: 2026-03-06 20:13:02 UTC | SHA-256: b3c85aa6a19fc8ceโ€ฆ
URL: https://conductatlas.com/platform/microsoft/microsoft-privacy-statement-legacy/data-retention-after-account-deletion/
Accessed: April 4, 2026
Classification
Severity
Medium
Categories

Other provisions in this document