Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy establishes rights for EU residents under GDPR, UK residents under UK GDPR, and California residents under CCPA/CPRA to access, correct, delete, or restrict processing of their personal data, and to lodge complaints with relevant supervisory authorities. These rights are exercised through Microsoft's privacy request mechanisms.
This analysis describes what Minecraft's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes the procedural mechanisms through which users in regulated jurisdictions can exercise their statutory privacy rights in relation to Minecraft data. The rights are administered through Microsoft's centralized privacy infrastructure, meaning request processing is governed by Microsoft's enterprise data subject request procedures.
Interpretive note: The actual policy text specifying rights mechanisms was not rendered in the provided HTML; the rights described are inferred from the document's subject matter, applicable regulatory requirements, and Microsoft's known privacy infrastructure.
Removal of region-specific privacy rights provisions eliminates accessible descriptions of user rights under GDPR, UK GDPR, and CCPA frameworks.
View full change record →This addition reflects enhanced transparency regarding jurisdiction-specific privacy rights, addressing GDPR, UK GDPR, and CCPA/CPRA compliance obligations that were previously handled only through the Microsoft Privacy Statement.
View full change record →Under this provision, EU, UK, and California residents have documented pathways to request access, correction, deletion, or portability of their Minecraft-related personal data through Microsoft's privacy dashboard. The agreement also discloses the right to lodge complaints with the applicable supervisory authority, including EU national data protection authorities, the UK ICO, and the California Privacy Protection Agency.
How other platforms handle this
You may make a verifiable consumer request related to your personal information twice per 12-month period.
When you exercise any of your applicable legal rights to access, amend, or delete your personal information, we may request additional information from you for the purpose of confirming your identity.
where the EU GDPR or UK GDPR applies, we will respond within one calendar month of receiving a verifiable request, and where your request is complex...we may extend that period by up to a further two months.
Monitoring
Minecraft has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
(1) REGULATORY LANDSCAPE: This provision implicates GDPR Articles 15-22 (data subject rights), UK GDPR equivalent articles, and CCPA/CPRA Sections 1798.100-1798.125. Enforcement authorities include EU national data protection authorities, the UK ICO, and the CPPA. The policy's routing of rights requests through Microsoft's centralized infrastructure should be evaluated to confirm that response timelines and scope align with statutory requirements (30 days under GDPR, 45 days under CCPA). (2) GOVERNANCE EXPOSURE: Medium. Centralized rights request processing through Microsoft's infrastructure is operationally efficient but creates compliance dependencies on Microsoft's enterprise systems. If Minecraft-specific data is not fully surfaced within Microsoft's privacy dashboard, requests may be incompletely fulfilled. (3) JURISDICTION FLAGS: EU member states may have additional national requirements beyond GDPR baseline (for example, specific requirements around children's rights or legitimate interest assessments). California's CPRA introduced additional rights including the right to correct inaccurate personal information and the right to limit use of sensitive personal information, which should be addressed in the policy. (4) CONTRACT AND VENDOR IMPLICATIONS: B2B customers or institutional licensees (such as educational institutions using Minecraft Education Edition) may have contractual obligations to facilitate data subject rights requests from their users; they should confirm that Microsoft's DPA covers these obligations. (5) COMPLIANCE CONSIDERATIONS: Compliance teams should test the end-to-end data subject request workflow for Minecraft users to verify that requests submitted through Microsoft's privacy dashboard result in complete and timely responses covering Minecraft-specific data, including gameplay history, communications, and account data.
Regulatory citations, enforcement risk, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
This provision establishes the procedural mechanisms through which users in regulated jurisdictions can exercise their statutory privacy rights in relation to Minecraft data. The rights are administered through Microsoft's centralized privacy infrastructure, meaning request processing is governed by Microsoft's enterprise data subject request procedures.
Under this provision, EU, UK, and California residents have documented pathways to request access, correction, deletion, or portability of their Minecraft-related personal data through Microsoft's privacy dashboard. The agreement also discloses the right to lodge complaints with the applicable supervisory authority, including EU national data protection authorities, the UK ICO, and the California Privacy Protection Agency.
ConductAtlas has identified this type of provision across 295 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Minecraft.