If you live in California, Colorado, Virginia, Connecticut, or certain other US states, you have legal rights to access, correct, delete, and export your personal data, and to opt out of it being shared for advertising. Microsoft says it does not 'sell' personal data.
State privacy laws give millions of Americans enforceable rights over their personal data that go beyond what Microsoft voluntarily offers — knowing which state you live in determines what rights you can legally demand.
Residents of California, Colorado, Virginia, Connecticut, Texas, Oregon, and other states with privacy laws can legally demand that Microsoft provide, correct, or delete their personal data, and can opt out of data sharing for targeted advertising — these are enforceable legal rights, not just policy promises.
How other platforms handle this
Slack does not sell (as such term is defined in the CCPA or otherwise) the personal information we collect (and will not sell it without providing a right to opt out). We may also share personal information (in the form of identifiers and internet activity information) with third party advertisers f...
Residents of some states may have rights with respect to their personal information, such as rights to access, delete, or correct such information and to opt out of certain processing activities. These rights do not apply where personal information is governed instead by federal financial privacy la...
Depending on your location, you may have certain rights regarding your personal information, such as the right to access, correct, delete, or port your data. You can exercise these rights by visiting our Privacy Portal at privacy.openai.com or by emailing us at privacy@openai.com.
This clause could change without notice.
Get alerted when Microsoft updates this policy — with plain-language summaries and severity ratings.
REGULATORY FRAMEWORK: CCPA/CPRA (Cal. Civ. Code §1798.100–1798.199, enforced by CPPA and CA AG), Colorado Privacy Act (CPA, C.R.S. §6-1-1301, enforced by CO AG), Virginia Consumer Data Protection Act (VCDPA, Va. Code §59.1-575, enforced by VA AG), Connecticut Data Privacy Act (CTDPA, Conn. Gen. Stat. §42-515, enforced by CT AG), Texas Data Privacy and Security Act (TDPSA, Bus. & Com. Code §541.001, enforced by TX AG), Oregon Consumer Privacy Act (OCPA, ORS §646A.570, enforced by OR AG), and Montana Consumer Data Privacy Act. Each law establishes distinct rights timelines, appeal requirements, and opt-out mechanisms that must be separately operationalized.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.
Don't miss changes to this clause.
Microsoft has updated this policy before. Get alerted on the next change.
Watch MicrosoftState privacy laws give millions of Americans enforceable rights over their personal data that go beyond what Microsoft voluntarily offers — knowing which state you live in determines what rights you can legally demand.
Residents of California, Colorado, Virginia, Connecticut, Texas, Oregon, and other states with privacy laws can legally demand that Microsoft provide, correct, or delete their personal data, and can opt out of data sharing for targeted advertising — these are enforceable legal rights, not just policy promises.
ConductAtlas has identified this type of provision across 1 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Microsoft.