CCPA Guidance for Authorized Agents

Overview

The California Consumer Privacy Act of 2018 (“CCPA”) creates a variety of privacy rights for California consumers. Microsoft makes it easy for consumers to exercise their rights, including the rights, via a verifiable request, that we (i) disclose and access what personal data we collect, use, disclose, share, and sell, (ii) delete the consumer’s personal data, (iii) correct the consumer’s personal data, (iv) restrict the use and disclosure of the consumer’s sensitive data, and (v) opt-out of “sharing” the consumer’s personal data with third parties for personalized advertising purposes on third party sites. Per the CCPA, consumers may exercise their rights through an authorized agent. This guidance is intended for authorized agents acting on behalf of a consumer looking to exercise the above CCPA rights.

Microsoft makes personal data available through a few mechanisms, depending on whether the consumer has a personal Microsoft account or not.

If the consumer has a Microsoft account

Consumers with a Microsoft account can exercise their CCPA rights through the Microsoft privacy dashboard. There, users can view, download, or delete the specific pieces of personal information which are linked to the account.

If users have personal content that they want to export or delete from Microsoft products, some data is made available within our applications or through self-serve experiences. For example, Outlook offers features to export and delete emails and contacts, and Skype allows users to request a copy of their chat history and files shared on Skype. Details on other self-help experiences can be found at our Privacy Frequently Asked Questions (FAQs) page.

To access or delete other data related to a Microsoft account, users can log in to their account and make a request directly to our privacy support team. It is important to note that a valid login is required to access or delete personal information associated with a Microsoft account. This safeguard is in place to protect the security of consumers and their data.

For any questions you may have as an authorized agent, please contact our privacy support team for assistance.

If the consumer does not have a Microsoft account

If the consumer does not have a Microsoft account or would like to export or delete data not linked to a Microsoft account, they can make a request directly to our privacy support team. As this request is for data outside of a logged-in Microsoft account experience, we require two identification factors, such as a verified email and phone number, to process a request to access data.

For any questions you may have as an authorized agent, please contact our privacy support team for assistance.

If the consumer wishes to “Opt-out” of the “Sale” or "Sharing" of their personal data

Microsoft does not sell your personal information, so we do not offer an opt out.

Microsoft may “share” personal information with third parties for personalized advertising purposes. Consumers may indicate their choice to opt-out of the sharing of personal data with third parties for personalized advertising on third party sites by visiting our sharing opt-out page.

Additional resources