Microsoft may use content you generate and interactions you have with Copilot and other AI-powered services to improve and train its AI models.
Your conversations, prompts, and outputs in AI tools like Copilot may contribute to training future AI systems, raising questions about the privacy of sensitive information shared in those sessions.
AI data retention and training practices engage Article 5 and 6 GDPR (purpose limitation, legal basis), the EU AI Act's provisions on general-purpose AI model training data, and CCPA rights regarding use of personal information for secondary purposes; organisations deploying Microsoft Copilot in regulated environments should review DPAs carefully.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.
Microsoft collects an extensive range of personal data β including location, voice, typed content, browsing history, and device diagnostics β across all its products and may combine this data for advertising, product improvement, and AI model training. Consumers' personal data may be shared with third-party advertisers, affiliates, and service providers, and inferred data about interests and behaviour is generated even from passive use. You can review and manage your privacy settings, including ad personalisation and data collection preferences, at https://account.microsoft.com/privacy.