Dec 12, 2023

Microsoft Privacy Statement – Azure Privacy and Compliance

Microsoft Privacy Statement

The Microsoft Privacy Statement contains details about how each Microsoft service interacts with your data. It covers how this personal data is collected, the purpose it serves, and how it is used. The Microsoft Privacy Statement extends across all products and services, such as Windows, M365, Azure, and Xbox; across all operating environments such as the cloud and on-premises; and all markets such as commercial, academic, consumer, and so on.

The Microsoft Privacy Statement can be accessed from https://privacy.microsoft.com/privacystatement:

Figure 10.4 – Microsoft Privacy Statement

In this section, we looked at the Microsoft Privacy Statement and what information it contains. The following section will look at the Microsoft Product Terms site.

The Product Terms site

The Products Terms site is an online portal containing the legal agreement and licensing terms and conditions that an organization must comply with through Microsoft commercial licensing programs.

The site covers all products and services; that is, Software and Online Services; these were previously available as separate resources and have now been combined into a single unified online resource.

The Product Terms site can be accessed from https://www.microsoft.com/licensing/terms:

Figure 10.5 – Microsoft Product Terms site

In this section, we looked at the Product Terms site. The following section looks at the Data Protection Addendum.

Data Protection Addendum

The Data Protection Addendum (DPA) is an addendum to the Product Terms site we looked at in the previous section. It defines the data processing and security terms for any Online Services an organization subscribes to under the Product Terms site.

The current and archived versions of the addendum can be downloaded from the Product Terms site and can also be accessed from https://www.microsoftvolumelicensing.com/DocumentSearch.aspx:

Figure 10.6 – Data Protection Addendum

In this section, we looked at the DPA for subscribed Online Services. The following section looks at the Azure compliance documentation.