Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
Microsoft will close Microsoft accounts inactive for two years and will separately close Outlook.com inboxes and OneDrive accounts inactive for one year; closure results in deletion of associated data and content and potential loss of access to purchased products.
This analysis describes what Microsoft's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes specific inactivity thresholds that trigger automatic account and data closure, with distinct timelines for the general Microsoft account (two years) versus Outlook.com and OneDrive (one year). Account closure under this provision results in data deletion and potential forfeiture of purchased product access as stated in Section 4(a)(iv)(2).
The agreement states that Microsoft will close accounts inactive for two years and will separately close Outlook.com and OneDrive accounts inactive for one year. Closure results in deletion of data and content associated with the account and potential loss of access to previously acquired products.
Cross-platform context
See how other platforms handle Account Inactivity Closure and similar clauses.
Compare across platforms →Monitoring
Microsoft has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"You must use your Microsoft account to keep it active. This means you must sign in at least once in a two-year period to keep your Microsoft account, and associated Services (unless specified otherwise), active, unless a longer period is provided in the Microsoft account activity policy at https://go.microsoft.com/fwlink/p/?linkid=2086738 or in an offer for a paid portion of the Services. If you don't sign in during this time, we will assume your Microsoft account is inactive and will close it for you. You must sign into your Outlook.com inbox and your OneDrive (separately) at least once in a one-year period, otherwise we will close your Outlook.com inbox and your OneDrive for you.Excerpt from Microsoft's Services Agreement (Legacy)
1. REGULATORY LANDSCAPE: The inactivity closure and data deletion provisions interact with GDPR data retention and erasure requirements for EU users, including the principle of storage limitation under Article 5. CCPA provisions on data deletion rights may also be relevant for California residents. The document states that data will be deleted unless required by law to be retained, returned, or transferred, which acknowledges applicable legal retention obligations. 2. GOVERNANCE EXPOSURE: Medium. The one-year inactivity threshold for Outlook.com and OneDrive is operationally significant for users who rely on these services for long-term storage without frequent active login. The provision creates a data preservation risk for users who are unaware of the inactivity policy. 3. JURISDICTION FLAGS: EU and UK users may have rights under GDPR to receive advance notice before data deletion and to access or export their data prior to closure. The document provides a general recommendation to maintain backups but does not specify advance notice requirements for inactivity-based closure in the excerpted text. 4. CONTRACT AND VENDOR IMPLICATIONS: Organizations that provision Microsoft consumer accounts for users should assess whether inactivity policies align with organizational data retention requirements and whether backup procedures are in place to prevent unintended data loss upon account closure. 5. COMPLIANCE CONSIDERATIONS: Compliance teams should evaluate whether the inactivity thresholds are adequately disclosed at account creation and whether advance notice of pending closure is provided, particularly for Outlook.com and OneDrive given the one-year window. Data mapping exercises should identify what categories of data are subject to deletion upon closure and whether any retention obligations require preservation of that data notwithstanding the inactivity closure.
Regulatory citations, enforcement risk, and due diligence action items.
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
This provision establishes specific inactivity thresholds that trigger automatic account and data closure, with distinct timelines for the general Microsoft account (two years) versus Outlook.com and OneDrive (one year). Account closure under this provision results in data deletion and potential forfeiture of purchased product access as stated in Section 4(a)(iv)(2).
The agreement states that Microsoft will close accounts inactive for two years and will separately close Outlook.com and OneDrive accounts inactive for one year. Closure results in deletion of data and content associated with the account and potential loss of access to previously acquired products.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Microsoft.