Live data from Hacker News

Microsoft’s commitment to GDPR, privacy and customers’ control of their own data

blogs.microsoft.com

11–20 of 82 posts

Re: Microsoft’s commitment to GDPR, privacy and customers’ control of their own data

#12
post #7

Earlier quoted context omitted.

Can I now (in 4 days time), ask Microsoft for all the data it's hoovered up from my Windows 10 installation? Did you go to the dasboard linked in the article? https://account.microsoft.com/privacy It does show non-website data, such as voice queries, location data, media played, product & service performance, app & service activity, Cortana notebook (commute preferences, etc.). It seems that you can also clear this d…

But I don't have a Microsoft account (only ever used local accounts in Windows 10). How can I ask for all my data which is associated with my installation/license?

This! I don't use the MS account for my installation. Nevertheless, a lot of stuff must be sent to them about me.

Re: Microsoft’s commitment to GDPR, privacy and customers’ control of their own data

#13
post #11

I was just wondering whether there is an automatic update to Windows disabling (all?) telemetry, then let the user make the choice to opt in without grey UI patterns and fud.

The "April update" that is getting rolled out does this on the first start after the update. You get asked what each privacy setting should be. I felt it was fairly easy to understand and not trying to trick you.

Re: Microsoft’s commitment to GDPR, privacy and customers’ control of their own data

#14
post #4

Ok so there’s a privacy policy on this website and a standard “we use cookies” header but where is the consent management platform that’s supposed to let me review all the purposes and vendors used on the site so I can choose which ones I want to give consent to and which ones I don’t. The https://github.com/appnexus/cmp appnexus cmp is the only cmp I’ve found that’s open source and provides a clear reference to what…

I haven't seen a single one of those in the wild yet, only "we've updated our ToS with a section about your private data, agree or stop using our service", which simply does not fly.

Re: Microsoft’s commitment to GDPR, privacy and customers’ control of their own data

#15

Here's a question I haven't seen asked or answered: Can I now (in 4 days time), ask Microsoft for all the data it's hoovered up from my Windows 10 installation? I've only seen people talking about GDPR as it applies to websites, but as far as I'm aware, it applies to all software.

There is an option to delete all diagnostic data collected (Windows 10 1803). You can find it under Settings->Privacy-> Diagnostics & feedback-> Delete diagnostic data. As others have mentioned you can access and manage it using the portal that is linked.*

* I work at Microsoft.

Re: Microsoft’s commitment to GDPR, privacy and customers’ control of their own data

#16
post #4

Ok so there’s a privacy policy on this website and a standard “we use cookies” header but where is the consent management platform that’s supposed to let me review all the purposes and vendors used on the site so I can choose which ones I want to give consent to and which ones I don’t. The https://github.com/appnexus/cmp appnexus cmp is the only cmp I’ve found that’s open source and provides a clear reference to what…

I'm pretty sure that GDPR doesn't mean you get to decide which vendors Microsoft gets to use. The commitment is that Microsoft and all vendors they use will be following GDPR.

Re: Microsoft’s commitment to GDPR, privacy and customers’ control of their own data

#17
post #7

Earlier quoted context omitted.

Can I now (in 4 days time), ask Microsoft for all the data it's hoovered up from my Windows 10 installation? Did you go to the dasboard linked in the article? https://account.microsoft.com/privacy It does show non-website data, such as voice queries, location data, media played, product & service performance, app & service activity, Cortana notebook (commute preferences, etc.). It seems that you can also clear this d…

But I don't have a Microsoft account (only ever used local accounts in Windows 10). How can I ask for all my data which is associated with my installation/license?

My best guess would be that your data is going through pseudonymization and so you are no longer uniquely identifiable.

[1] By contrast to anonymization, Article 4(5) of the GDPR defines pseudonymization as “the processing of personal data in such a way that the data can no longer be attributed to a specific data subject without the use of additional information.” By holding the de-identified data separately from the “additional information,” the GDPR permits data handlers to use personal data more liberally without fear of infringing the rights of data subjects. This is because the data only becomes identifiable when both elements are held together.

[1] https://iapp.org/news/a/looking-to-comply-with-gdpr-heres-a-...

Re: Microsoft’s commitment to GDPR, privacy and customers’ control of their own data

#18
post #9

Privacy: ability to opt out of all data collection. Microsoft privacy: inability to opt out of all data collection unless you pay for enterprise edition. This makes a mockery of any policy.

Also ads for Candy Crush in you operating system.

Microsoft is scum. They have not changed from the 90s, they are just better at hiding it.

Re: Microsoft’s commitment to GDPR, privacy and customers’ control of their own data

#19
post #7

Earlier quoted context omitted.

Can I now (in 4 days time), ask Microsoft for all the data it's hoovered up from my Windows 10 installation? Did you go to the dasboard linked in the article? https://account.microsoft.com/privacy It does show non-website data, such as voice queries, location data, media played, product & service performance, app & service activity, Cortana notebook (commute preferences, etc.). It seems that you can also clear this d…

But I don't have a Microsoft account (only ever used local accounts in Windows 10). How can I ask for all my data which is associated with my installation/license?

I think the actual answer is that you send a snail-mail letter to MS, supplying proof of identity, details of your license and ask for all the PII that they have on you.

Re: Microsoft’s commitment to GDPR, privacy and customers’ control of their own data

#20
post #4

Ok so there’s a privacy policy on this website and a standard “we use cookies” header but where is the consent management platform that’s supposed to let me review all the purposes and vendors used on the site so I can choose which ones I want to give consent to and which ones I don’t. The https://github.com/appnexus/cmp appnexus cmp is the only cmp I’ve found that’s open source and provides a clear reference to what…

Don't forget that 'consent' is only one of the bases to collect data. Where the data is vital to the ability to run the service, it will be being collected on the basis of contractual agreement, not consent.
Post reply on HN