Microsoft · Microsoft Privacy Statement (Legacy) · View original document ↗

Data Sharing with Third Parties and Affiliates

Medium severity High confidence Explicitdocumentlanguage Unique · 0 of 325 platforms
Share 𝕏 Share in Share 🔒 PDF
Recent governance activity Microsoft recorded 3 documented changes in the last 30 days.
Start monitoring updates
Monitor governance changes for Microsoft Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.

This analysis describes what Microsoft's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

Your data can flow to a wide range of third-party vendors and Microsoft affiliates under this provision, and the self-determined grounds for sharing, such as protecting rights or property of Microsoft, are broad and difficult for users to monitor.

Recent Activity

This document changed recently

Medium Apr 19, 2026

The updated policy establishes additional grounds on which Microsoft may retain personal data. While the prior version tied retention to specific user expectations and available deletion controls, th…

Medium Apr 1, 2026

The updated policy now grounds data retention in five broad business purposes: operating the business, meeting contractual and legal obligations, improving and developing products and services, prote…

Medium Mar 13, 2026

The updated Privacy Statement removes previously stated language about additional rights available to European Economic Area users, narrowing the policy's explicit protections in that region. Simulta…

Consumer impact (what this means for users)

The statement authorizes Microsoft to collect a wide range of personal data including identifiers, location, voice and audio recordings, browsing and search history, and content created within Microsoft products, and to use this data for advertising, product personalization, and AI model improvement across its product portfolio. EU and UK users have GDPR-based rights including access, correction, deletion, and objection to processing, while California and other U.S. state residents have rights under applicable state privacy laws including the right to opt out of data sales or sharing for targeted advertising. You can access, review, download, or delete your personal data and adjust advertising and personalization settings at account.microsoft.com/privacy.

How other platforms handle this

Revolut Medium

When you ask us to open an Account, we or someone acting for us will ask for information about you and where the money you will put in your Account comes from. We do this for a number of reasons, including to check your credit score and identity, and to meet our legal and regulatory requirements. Ou...

Wise Medium

We may share your personal information with third parties, including service providers, financial institutions, regulatory authorities, and fraud prevention agencies, where necessary to provide our services, comply with legal obligations, or protect against fraud and financial crime.

Lime Medium

We may share your information with third-party advertising partners to provide you with targeted advertising. We also work with third-party analytics providers who help us understand how users interact with our Services. These third parties may use cookies, web beacons, and similar tracking technolo...

See all platforms with this clause type →

Monitoring

Microsoft has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
We share your personal data with your consent or as necessary to complete any transaction or provide any product you have requested or authorized. We also share data with Microsoft-controlled affiliates and subsidiaries; with vendors or agents working on our behalf for the purposes described in this statement; when required by law or to respond to legal process; to protect our customers; to protect lives; to maintain the security of our products; and to protect the rights or property of Microsoft.

— Excerpt from Microsoft's Microsoft Privacy Statement (Legacy)

Applicable regulations

BIPA
Illinois, USA
CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
DMA
European Union
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
UK GDPR
United Kingdom
Universal Opt-Out Mechanism Expansion 2026
US
VPPA
United States Federal

Provision details

Document information
Document
Microsoft Privacy Statement (Legacy)
Entity
Microsoft
Document last updated
March 5, 2026
Tracking information
First tracked
April 28, 2026
Last verified
May 12, 2026
Record ID
CA-P-008964
Document ID
CA-D-00001
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
9e697464d17b7148c787f07099c60e30370abb2b13a7f2a910f607e31ec13158
Analysis generated
April 28, 2026 08:11 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Microsoft
Document: Microsoft Privacy Statement (Legacy)
Record ID: CA-P-008964
Captured: 2026-04-28 08:11:57 UTC
SHA-256: 9e697464d17b7148…
URL: https://conductatlas.com/platform/microsoft/microsoft-privacy-statement-legacy/data-sharing-with-third-parties-and-affiliates/
Accessed: May 13, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Related Analysis

Professional Governance Intelligence

Need to monitor specific governance provisions?

Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Professional free trial

Or start with Watcher →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Microsoft's Data Sharing with Third Parties and Affiliates clause do?

Your data can flow to a wide range of third-party vendors and Microsoft affiliates under this provision, and the self-determined grounds for sharing, such as protecting rights or property of Microsoft, are broad and difficult for users to monitor.

Is ConductAtlas affiliated with Microsoft?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Microsoft.