U.S. State Privacy Laws - Guidance for authorized agents
Last updated: November 2025
Overview
Several U.S. State privacy laws create a variety of privacy rights for individuals in the U.S. As part of its commitment to trust, Microsoft makes it easy for all U.S. individuals, to exercise these rights including, via a verifiable request, that we (i) disclose and access what personal data we collect, use, disclose, share, and sell, (ii) delete their personal data, (iii) correct their personal data, (iv) restrict the use and disclosure of their sensitive data, and (v) opt-out of “sharing” their personal data with third parties for personalized advertising purposes on third party sites. Individuals in the U.S. may exercise their rights through an authorized agent. This guidance is intended for authorized agents acting on behalf of an individual looking to exercise the above rights.
Microsoft makes personal data available through a few mechanisms, depending on whether the individual has a personal Microsoft account or not.
If the individual has a Microsoft account
Individuals with a Microsoft account can exercise their privacy rights through the Microsoft privacy dashboard. There, users can view, download, or delete the specific pieces of personal data which are linked to the account.
If users have personal data that they want to export or delete from Microsoft products, that personal data is available within our applications or through self-serve experiences. For example, Outlook offers features to export and delete emails and contacts. Details on other self-help experiences can be found at the Privacy Frequently Asked Questions (FAQs) page.
To access or delete other data related to a Microsoft account, users can log in to their account and make a request directly to our privacy support team. It is important to note that a valid login is required to access or delete personal data associated with a Microsoft account. This safeguard is in place to protect the individuals’ security and their data.
If the individual does not have a Microsoft account
If the individual does not have a Microsoft account or would like to export or delete data not linked to a Microsoft account, they can make a request directly to our privacy support team as stated on this page. As this request is for data outside of a logged-in Microsoft account experience, we require two identification factors, such as a verified email and phone number, to process a request to access data.
If the individual wishes to “Opt-out” of the “Sale” or "Sharing" of their personal data
As mentioned in the U.S. State Law Privacy Notice, Microsoft does not sell your personal data as set forth in the California Consumer Privacy Act (CCPA) or other U.S. state data privacy laws, so we do not offer an opt out.
Microsoft may “share” personal information with third parties for personalized advertising purposes. Individuals may indicate their choice to opt-out of the sharing of personal data with third parties for personalized advertising on third party sites by visiting our sharing opt-out page.
How to contact us
For any questions you may have as an authorized agent, please contact our privacy support team for assistance or contact us using the following information: Microsoft Privacy, Microsoft Corporation, One Microsoft Way, Redmond, Washington 98052, USA. Telephone: +1 (425) 882 8080.
Additional resources
- Our U.S. State Data Privacy Laws Notice offers additional transparency around the personal data we collect and elaborates on the privacy controls available to our users.
- To learn more about Microsoft's privacy principles, visit microsoft.com/privacy.
- To learn more about how to access and delete personal data held by Microsoft, visit our Privacy Frequently Asked Questions (FAQs).
- See also the U.S. State Data Privacy section of the Microsoft Privacy Statement.