This analysis describes what Microsoft's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The updated privacy statement clarifies that Microsoft Copilot collects data about your interactions with Microsoft websites and apps, in addition to previously disclosed device and product usage data. The policy now states that Copilot may use your conversation history, including saved memories, to personalize your experience across Microsoft products such as Bing, Edge, and MSN. You can manage your memories and control personalization features using the settings in Microsoft Copilot at any time.
View change record →How other platforms handle this
If you have enabled a legally recognized browser-based opt out preference signal (such as Global Privacy Control) on your browser, we recognize such preference to the extent required by applicable law.
You have the right to access, correct, delete, or object to the processing of your personal data. You also have the right to data portability and to file complaints with the NPC.
if you have enabled a Global Privacy Control on your browser, our Websites are configured to recognize and respect those preferences with respect to Personal Information that falls under the CCPA/CPRA.
"Microsoft receives and responds to the Global Privacy Control (GPC) browser opt-out signal in certain jurisdictions. Microsoft will turn off sharing your data with third parties for personalized ads...Excerpt from Microsoft's Privacy Statement (Legacy)
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
The clause states: “Microsoft receives and responds to the Global Privacy Control (GPC) browser opt-out signal in certain jurisdictions. Microsoft will turn off sharing your data with third parties for personalized ads...”
ConductAtlas has identified this type of provision across 277 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Microsoft.