Microsoft collects data from you and your devices when you use its services, and the full details of what is collected and how it is used are in a separate Privacy Statement — by using any Microsoft service, you consent to this data collection.
By using any Microsoft service you consent to data collection described in a separate Privacy Statement — which covers device diagnostics, usage data, advertising identifiers, and voice/search data — and you should review that document at privacy.microsoft.com to understand the full scope of data Microsoft collects.
Cross-platform context
See how other platforms handle Microsoft Account Data and Privacy and similar clauses.
Compare across platforms →Incorporating the Privacy Statement by reference rather than including it directly means consumers must review a separate lengthy document to understand the full extent of Microsoft's data collection, which may include diagnostic data, usage patterns, location data, and advertising identifiers.
REGULATORY FRAMEWORK: This provision implicates GDPR Arts. 6, 7, 13 (lawful basis and transparency obligations), CCPA §1798.100 et seq. (right to know, delete, and opt out of sale), FTC Act Section 5, Washington My Health MY Data Act (SB 1155, 2023, covering consumer health data), and the EU ePrivacy Directive (cookie and device data collection). Enforcement authorities: Irish DPC (Microsoft's EU lead supervisory authority), California AG/CPPA, FTC, and Washington AG.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.