The California Consumer Privacy Act of 2018 (“CCPA”) creates a variety of privacy rights for California consumers. Microsoft makes it easy for consumers to exercise their rights, including the rights, via a verifiable request, that we (i) disclose and access what personal data we collect, use, disclose, and sell and (ii) delete the consumer’s personal data. Per the CCPA, consumers may exercise their rights through an authorized agent. This guidance is intended for authorized agents acting on behalf of a consumer looking to exercise the above CCPA rights.
Microsoft makes personal data available through a few mechanisms, depending on whether the consumer has a personal Microsoft account or not.
Consumers with a Microsoft account can exercise their CCPA rights through the Microsoft privacy dashboard. There, users can view, download, or delete the specific pieces of personal information which are linked to the account.
If users have personal content that they want to export or delete from Microsoft products, some data is made available within our applications or through self-serve experiences. For example, Outlook offers features to export and delete emails and contacts, and Skype allows users to request a copy of their chat history and files shared on Skype. Details on other self-help experiences can be found at the Microsoft Privacy Hub.
To access or delete other data related to a Microsoft account, users can log in to their account and make a request directly to our privacy team. It is important to note that a valid login is required to access or delete personal information associated with a Microsoft account. This safeguard is in place to protect the security of consumers and their data.
For any questions you may have as an authorized agent, please contact Microsoft’s Privacy Response Center for assistance.
If the consumer does not have a Microsoft account or would like to export or delete data not linked to a Microsoft account, they can make a request directly to our privacy team. As this request is for data outside of a logged-in Microsoft account experience, we require two identification factors, such as a verified email and phone number, to process a request to access data.
For any questions you may have as an authorized agent, please contact Microsoft’s Privacy Response Center for assistance.
Microsoft does not sell your personal information, so we do not offer an opt out.
