Can Microsoft Read My Emails?

• Free Outlook.com Users: For free accounts, Microsoft mostly uses advertising-based revenue. While they don’t scan emails for advertising purposes like some other free email providers have historically done, Outlook.com accounts still undergo automated scans for security purposes. Microsoft says that they don’t sell data from these accounts to advertisers. However, users should note that with a free email service, there is always the possibility that security scans are broader than in paid services, so be aware of that when making a decision about your email provider.

• Microsoft 365 (Business and Enterprise): Paid accounts, especially those with Microsoft 365 or Exchange Online, have tighter privacy controls in place. In these accounts, data protection standards are generally higher, given that businesses expect a greater degree of confidentiality and control. These emails are subject to the same automated security scans as free Outlook accounts, but additional security features are often available, including the encryption of data. Enterprise agreements may also include clauses that limit Microsoft’s access to data more strictly than in free accounts.

Government and Legal Requests

All Microsoft accounts, whether personal or business, may be subject to government requests and this is something that’s not unique to Microsoft.

However, Microsoft has shown a commitment to transparency through their biannual Transparency Report, which discloses information about data requests received from governments globally. Microsoft reports that they only share the minimum amount of data required and that they notify users when legally permitted.

Does Microsoft Share Data from Your Emails?

Microsoft doesn’t sell the contents of your emails to third parties for marketing purposes, and generally speaking, that’s most people’s biggest concern.

Any data sharing that does occur typically involves third-party services that help Microsoft deliver their services. For instance, if Microsoft partners with a security provider, certain metadata may be shared to help improve email security.

As a privacy-first approach, Microsoft offers users tools to manage their data preferences. For instance, in Microsoft 365, users can adjust settings related to data sharing and advertising preferences.

Also, Microsoft 365 users have more control over data residency which can offer a layer of protection, especially for companies in regulated industries.