Microsoft · Microsoft Privacy Statement (Legacy)

Speech Recognition and Voice Data Collection

High severity
Share 𝕏 Share in Share

What it is

Microsoft records and stores your voice when you use features like Cortana or voice input, and uses these recordings to improve its speech recognition systems. You can turn this off in device settings.

Consumer impact (what this means for users)

Your voice recordings collected via Cortana or Windows voice features may be stored, analyzed, and used to improve Microsoft's speech recognition products, potentially exposing sensitive spoken content to processing beyond your immediate interaction.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    Go to account.microsoft.com/privacy, sign in, navigate to 'Voice' under activity history, and delete your stored voice recordings. Also disable voice recognition in Windows Settings > Privacy > Speech.

How other platforms handle this

Netflix Medium

In certain instances, Customer Service may best be able to assist you by using a remote access support tool through which we have full access to your computer. If you do not want us to have this access, you should not consent to support through the remote access tool, and we will assist you through ...

Bumble Medium

IN CERTAIN CIRCUMSTANCES, SUCH AS IN RESPONSE TO MEMBER-GENERATED OR PRESS REPORTS OF SUSPECTED MISCONDUCT, THE BUMBLE GROUP MAY INVESTIGATE WHETHER A MEMBER HAS A CRIMINAL HISTORY, WHICH MAY, DEPENDING ON THE CIRCUMSTANCES, INCLUDE SEARCHING SEX OFFENDER REGISTRIES OR OTHER PUBLIC RECORDS... CRIMIN...

Netflix Medium

Cookies are small data files that are commonly stored on your device when you access websites and online services. The text in a cookie contains a string of numbers and letters that may uniquely identify a device and can contain other information as well. This allows the web server to recognize your...

See all platforms with this clause type →
Need full compliance memos? See Professional →

Why it matters (compliance & risk perspective)

Voice recordings are sensitive biometric-adjacent data that can reveal health conditions, emotional states, and private conversations — and their use for product improvement means they may be retained and reviewed beyond their original purpose.

View original clause language
Microsoft collects and uses your voice data to provide voice-activated features such as Cortana and to improve speech recognition technology. When you use voice input features, Microsoft may collect your voice data to improve the accuracy of speech recognition. You can disable voice recognition features in your device settings. Microsoft may also use voice data to improve its products and services.

Institutional analysis (Compliance & legal intelligence)

REGULATORY FRAMEWORK: Voice data may constitute biometric data under GDPR Art. 9(1) if used to uniquely identify individuals, triggering explicit consent requirements under Art. 9(2)(a). Illinois BIPA (740 ILCS 14) applies to biometric identifiers including voice prints, with statutory damages of $1,000–$5,000 per violation. Washington Biometric Privacy Law (RCW 19.375) and Texas CUBI (Bus. & Com. Code §503.001) impose similar requirements. FTC Act Section 5 applies to deceptive voice data collection practices. COPPA applies if voice data is collected from users under 13.

🔒

Compliance intelligence locked

Regulatory citations, enforcement risk, and due diligence action items.

Watcher $9.99/mo Professional $149/mo

Watcher: regulatory citations. Professional: full compliance memo.

Applicable agencies

  • FTC
    The FTC has enforcement authority over unfair or deceptive practices in voice data collection and has brought actions against companies for retaining voice recordings without adequate disclosure.
    File a complaint →
  • State AG
    State AGs in Illinois, Washington, and Texas have enforcement authority over biometric privacy laws that may apply to Microsoft's voice data collection practices.
    File a complaint →

Applicable regulations

EU AI Act
European Union
BIPA
Illinois, USA
CCPA/CPRA
California, USA
COPPA
United States Federal
CAN-SPAM
United States Federal
DMA
European Union
FCRA
United States Federal
GDPR
European Union
GLBA
United States Federal
HIPAA
United States Federal
TCPA
United States Federal
UK GDPR
United Kingdom

Provision details

Document information
Document
Microsoft Privacy Statement (Legacy)
Entity
Microsoft
Document last updated
March 5, 2026
Tracking information
First tracked
April 9, 2026
Last verified
April 9, 2026
Record ID
CA-P-002498
Document ID
CA-D-00001
Evidence Provenance
Source URL
Wayback Machine
SHA-256
7a7aaaae65bc958b5f0f4bd77710852e41e6cfb0400ed13c15acbc6d552e2a1d
Verified
✓ Snapshot stored   ✓ Change verified
How to Cite
ConductAtlas Policy Archive
Entity: Microsoft | Document: Microsoft Privacy Statement (Legacy) | Record: CA-P-002498
Captured: 2026-04-09 15:01:32 UTC | SHA-256: 7a7aaaae65bc958b…
URL: https://conductatlas.com/platform/microsoft/microsoft-privacy-statement-legacy/speech-recognition-and-voice-data-collection/
Accessed: April 29, 2026
Classification
Severity
High
Categories

Other provisions in this document

Related Analysis