Consumer Apps · Productivity/Utility · Private litigation
Microsoft (Outlook/365)
Headline
A business-customer lawsuit filed in 2020 (Russo v. Microsoft; dismissed with leave to amend in June 2021; docket terminated November 2022) alleged Microsoft shares Exchange/365 customers' emails, documents, and…
Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.
A business-customer lawsuit filed in 2020 (Russo v. Microsoft; dismissed with leave to amend in June 2021; docket terminated November 2022) alleged Microsoft shares Exchange/365 customers' emails, documents, and calendars with 'unauthorized third parties for unauthorized purposes' and uses that data to develop Microsoft's OWN products — while marketing 365 as 'secure and private.' If proven, this means businesses paying for a premium, security-branded product may have had their confidential internal communications quietly repurposed to improve the same company's other commercial offerings.
- Severity
- Evidence tierUnassigned
- Claims confirmed
- Last verified2026-08-04
Case status. Private litigation; no sources are on file yet, so no legal tier is assigned.
Primary source. None recorded — Unverified - heuristic first draft.
Terms
Arbitration
Not independently confirmed this pass — standard binding arbitration + class action waiver expected.
Data sharing
A class action (Russo v. Microsoft Corp., No. 4:20-cv-04818-YGR (N.D. Cal.), filed July 2020) alleged Microsoft 365/Exchange BUSINESS customers' contacts and data are shared with Facebook and other third parties WITHOUT CONSENT, despite Microsoft marketing these products as 'secure and private' — the complaint further alleges Microsoft shares customer emails, documents, and calendars with 'unauthorized third parties for unauthorized purposes' and uses customer data to develop its own products, allegedly violating the Wiretap Act and Stored Communications Act. On June 30, 2021 the court dismissed the complaint, largely for lack of standing because the factual allegations were 'too sparse and conclusory,' with leave to amend; the CourtListener docket index shows the case terminated on November 30, 2022 (manner of termination not confirmed). These are allegations, not findings. This is a BUSINESS/PROFESSIONAL customer issue rather than a purely consumer-facing one.
Fees and billing
Not itemized this pass.
Contacts
Privacy contact. No published privacy email; Microsoft routes requests via microsoft.com/concern/privacy (30-day response commitment)
Legal notice. PUBLIC COMPANY (MSFT). Service route: c/o General Counsel / Corporate Secretary, Redmond, Washington — the corporate address on the SEC Form 10-K cover page is the official address of record. Confirm the exact street address on the current 10-K at sec.gov/edgar, and check the state-of-incorporation registered agent (usually Delaware; most large filers use The Corporation Trust Company or Corporation Service Company) via the Secretary of State business-entity search. A registered agent MUST accept service, which is why it is the reliable channel when a company publishes no privacy address.
Mailing address. Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA
Evidence
No claims have been itemized for this row yet.
No sources are on file for this row yet.
Source vault
Link status: Candidate - not yet fetched
| Document | Last fetch | |
|---|---|---|
| Privacy policy privacy.microsoft.com/en-us/privacystatement | Not fetched yet | NO (HTML only) |
| Terms of service microsoft.com/en-us/servicesagreement/ | Not fetched yet | NO (HTML only) |
| Website microsoft.com | Not fetched yet | — |
| Primary source No URL recorded Verification: Unverified - heuristic first draft | Not fetched yet | — |
Enforcement
No enforcement actions are linked to this row.
State statute
No comprehensive state privacy statute on file for Washington