Windows collects diagnostic data about your device, software, and how you use your computer, and sends this information to Microsoft to improve Windows and related services.
Even if you have not actively consented to sharing personal information, Windows automatically collects and transmits data about your device usage, which can include app usage, error reports, and device configuration details.
Telemetry data collection in Windows raises GDPR Art. 25 privacy by design concerns and CCPA data minimisation expectations; enterprise customers deploying Windows should configure Group Policy to set diagnostic data to the minimum required level and document this in their records of processing activities.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.
Microsoft collects extensive personal data — including location, voice recordings, typed content, browsing history, and health-related data — across its entire product ecosystem, and uses this data for personalised advertising, product improvement, and AI model training. Data may be shared with third-party partners, advertisers, and other Microsoft-affiliated companies, and some data may be retained even after account deletion. You can review, download, or delete your personal data by visiting account.microsoft.com/privacy and adjusting settings via the Microsoft Privacy Dashboard.