Microsoft collects your voice commands (through Cortana and other voice-enabled features) and your search queries through Bing, and uses this data to improve services and personalise your experience.
Voice data is particularly sensitive because it can reveal not just your words but your identity, emotional state, and personal circumstances, and once collected may be stored and reviewed by Microsoft employees.
Collection and storage of voice recordings and search data implicates GDPR Article 9 (where voice data enables biometric identification), CCPA sensitive data provisions, and state wiretapping laws. Compliance teams should assess whether consent disclosures adequately inform users of voice data retention and human review practices.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.
Microsoft collects extensive personal data across its products including search history, voice recordings, location data, browsing behaviour, and inferred interests, and uses this data for targeted advertising and product improvement. Users' data may be shared with affiliates, advertising partners, and other third parties, and sensitive data such as health and biometric information may also be collected in certain contexts. You can review, download, or delete your personal data by visiting Microsoft's Privacy Dashboard at account.microsoft.com/privacy.