Microsoft shares your personal data with third-party vendors, service providers, advertising partners, and other companies that help deliver its services or use it to show you ads.
Once your data is shared with third parties, you lose direct control over how it is handled, and those third parties may have their own privacy policies and data uses that differ from Microsoft's.
Third-party data sharing arrangements must comply with GDPR Article 28 (controller-processor agreements), CCPA's service provider restrictions, and applicable cross-border transfer rules. Compliance teams should request and review Microsoft's data processing agreements and sub-processor lists, particularly for high-risk processing activities.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.
Microsoft collects extensive personal data across its products including search history, voice recordings, location data, browsing behaviour, and inferred interests, and uses this data for targeted advertising and product improvement. Users' data may be shared with affiliates, advertising partners, and other third parties, and sensitive data such as health and biometric information may also be collected in certain contexts. You can review, download, or delete your personal data by visiting Microsoft's Privacy Dashboard at account.microsoft.com/privacy.