What can I do about this clause?

{'method': 'WEB_FORM', 'recipient': 'https://account.microsoft.com/privacy', 'difficulty': 'MODERATE', 'action_type': 'DELETE_DATA', 'instructions': "Sign in to your Microsoft account at account.microsoft.com/privacy, navigate to 'Privacy dashboard', and select 'Voice data' or 'AI interaction history' to review and delete stored voice and AI interaction data.", 'deadline_days': None, 'deadline_hours': None}

Which regulatory agencies enforce this type of clause?

{'agency': 'FTC', 'reason': 'The FTC has enforcement authority under FTC Act Section 5 over unfair or deceptive data practices involving voice and AI training data collection from consumers.', 'complaint_url': 'https://reportfraud.ftc.gov/'}

What is the severity of this clause?

ConductAtlas classifies this AI Training and Voice Data Use clause as high severity. Severity reflects the magnitude of rights affected, the breadth of users impacted, and the degree of discretion the platform retains.

AI Training and Voice Data Use — Xbox

Share 𝕏 Share in Share 🔒 PDF

What it is

Microsoft can use your voice recordings and conversations with AI tools like Copilot to train and improve its AI systems, and human reviewers may listen to or read those interactions.

Consumer impact (what this means for users)

Your voice commands and AI chat interactions on Xbox and other Microsoft services may be reviewed by Microsoft employees and used to train AI models, creating ongoing data exposure beyond the immediate interaction.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.

Delete Your Data

Sign in to your Microsoft account at account.microsoft.com/privacy, navigate to 'Privacy dashboard', and select 'Voice data' or 'AI interaction history' to review and delete stored voice and AI interaction data.

Cross-platform context

See how other platforms handle AI Training and Voice Data Use and similar clauses.

Compare across platforms →

Need full compliance memos? See Professional →

Why it matters (compliance & risk perspective)

This means conversations you have with Xbox or other Microsoft AI features are not private — they may be stored, reviewed by humans, and used to build Microsoft's AI products.

View original clause language

When you use Microsoft products, Microsoft may collect voice data and use interactions with AI features to improve Microsoft products and services, including training and improving AI models. Voice data and AI interaction data may be reviewed by Microsoft employees and vendors.

Institutional analysis (Compliance & legal intelligence)

REGULATORY FRAMEWORK: This provision implicates GDPR Art. 5(1)(b) (purpose limitation), Art. 6(1)(a)-(f) (lawful basis for AI training), and Art. 22 (automated decision-making); CCPA/CPRA §1798.121 (sensitive personal information opt-out); Illinois BIPA (740 ILCS 14/) for biometric voice data; EU AI Act (Regulation 2024/1689) for high-risk AI system training data governance; and FTC Act Section 5 for unfair or deceptive data practices. The Irish DPC has primary GDPR enforcement authority for Microsoft's EU operations.

🔒

Compliance intelligence locked

Regulatory citations, enforcement risk, and due diligence action items.

Watcher $9.99/mo Professional $149/mo

Watcher: regulatory citations. Professional: full compliance memo.

Applicable agencies

FTC

The FTC has enforcement authority under FTC Act Section 5 over unfair or deceptive data practices involving voice and AI training data collection from consumers.
File a complaint →

Provision details

Document information

Document

Xbox Privacy Statement

Entity

Xbox

Document last updated

April 29, 2026

Tracking information

First tracked

April 27, 2026

Last verified

April 27, 2026

Record ID

CA-P-003189

Document ID

CA-D-00018

Evidence Provenance

Source URL

https://privacy.microsoft.com/en-us/privacystatement

Wayback Machine

View archived versions →

SHA-256

a67035af599dcfcefd7a22ae7c70147370fe6651cb96942500cd2ead91f2a017

Verified

✓ Snapshot stored ✓ Change verified

How to Cite

ConductAtlas Policy Archive
Entity: Xbox | Document: Xbox Privacy Statement | Record: CA-P-003189
Captured: 2026-04-27 09:55:26 UTC | SHA-256: a67035af599dcfce…
URL: https://conductatlas.com/platform/xbox/xbox-privacy-statement/ai-training-and-voice-data-use/
Accessed: May 2, 2026

Classification

Severity

High

AI Training and Voice Data Use