The Commission had concerns that tying Teams to Microsoft 365 and Office 365 gave Teams a distribution advantage and that limited interoperability made it harder for competing communication tools to compete. Microsoft offered suite versions without Teams, pricing differences, switching rights, interoperability and data-portability measures.
- Status
- Confirmed
- Company
- Microsoft
- Authority
- European Commission
- Decision date
- 12 September 2025
View caseReporting on a complaint involving a school account says the authority found that tracking cookies were placed without valid consent and that access rights were not handled correctly.
- Status
- Reported
- Company
- Microsoft
- Authority
- Austrian Data Protection Authority
- Event date
- 24 July 2025
View caseThe regulator examined LinkedIn’s legal bases for processing members’ data for behavioural analysis and targeted advertising. It found failures involving lawfulness, fairness and transparency.
- Status
- Confirmed
- Company
- Microsoft
- Authority
- Irish Data Protection Commission
- Decision date
- 22 October 2024
- Penalty
- €310,000,000
View caseCalifornia’s Civil Rights Department alleged that employees who used parental, disability, pregnancy, medical or family-care leave received lower bonuses and unfavourable reviews that could affect pay, stock awards and promotion. Microsoft denied the allegations and agreed to settle after a multi-year investigation.
- Status
- Confirmed
- Company
- Microsoft
- Authority
- California Civil Rights Department and Superior Court
- Decision date
- 8 August 2024
View caseThe board reviewed the 2023 compromise of Microsoft Exchange Online and described operational and strategic security decisions that allowed the intrusion to succeed and remain undetected.
- Status
- Context
- Company
- Microsoft
- Authority
- United States Cyber Safety Review Board
- Event date
- 2 April 2024
View caseThe FTC charged that Microsoft collected personal information from children under thirteen during Xbox account creation before notifying parents and obtaining verifiable consent. The complaint also addressed incomplete parental notices, disclosures to game publishers and retention of children’s data after an account-creation process was abandoned.
- Status
- Confirmed
- Company
- Microsoft
- Authority
- United States Federal Trade Commission and Department of Justice
- Decision date
- 5 June 2023
- Penalty
- US$20,000,000
View caseCNIL found that Bing placed an advertising cookie on users’ devices without valid consent when they visited the search engine. It also found that the site offered a one-click route to accept cookies but no equally direct route to refuse them.
- Status
- Confirmed
- Company
- Microsoft
- Authority
- French Data Protection Authority (CNIL)
- Decision date
- 19 December 2022
- Penalty
- €60,000,000
View caseConsumer Reports compared workplace communication policies and identified broad collection and use terms that employees may be unable to negotiate.
- Status
- Context
- Company
- Microsoft
- Authority
- Consumer Reports Digital Lab
- Event date
- 1 September 2021
View caseOFCCP compliance reviews identified hiring-rate disparities affecting Asian applicants for engineering, specialist and developer roles and Black and Hispanic applicants for software-engineering roles at Microsoft facilities in four states. The agency alleged that the selection practices violated federal-contractor equal-opportunity requirements.
- Status
- Confirmed
- Company
- Microsoft
- Authority
- United States Department of Labor, Office of Federal Contract Compliance Programs
- Decision date
- 18 September 2020
View caseA government-commissioned data protection impact assessment documented risks in diagnostic data sent by enterprise versions of Office and proposed measures for public-sector use.
- Status
- Context
- Company
- Microsoft
- Authority
- Dutch Ministry of Justice and Security
- Event date
- 7 November 2018
View caseMicrosoft had committed to show Windows users in the EEA a screen offering a choice of web browsers. The Commission found that the screen was not displayed to approximately 15.3 million Windows 7 Service Pack 1 users between May 2011 and July 2012.
- Status
- Confirmed
- Company
- Microsoft
- Authority
- European Commission
- Decision date
- 6 March 2013
- Penalty
- €561,000,000
View caseThe European Commission imposed a periodic penalty after finding that Microsoft had not made interoperability information available to competitors on reasonable terms, as required by the 2004 antitrust decision. Microsoft challenged the amount before the General Court.
- Status
- Confirmed
- Company
- Microsoft
- Authority
- General Court of the European Union
- Decision date
- 27 June 2012
- Penalty
- €860,000,000
View caseThe Commission found that Microsoft abused its dominant position by refusing to supply and authorise the use of interoperability information needed by competing work-group server operating systems, and by tying Windows Media Player to Windows.
- Status
- Confirmed
- Company
- Microsoft
- Authority
- European Commission
- Decision date
- 24 March 2004
- Penalty
- €497,196,304
View caseThe FTC alleged that Microsoft made false or misleading statements about privacy and security in Passport, Passport Wallet and Kids Passport. The complaint addressed undisclosed collection, claims about purchase security and failures to implement reasonable procedures for preventing, detecting and auditing unauthorised access.
- Status
- Confirmed
- Company
- Microsoft
- Authority
- United States Federal Trade Commission
- Decision date
- 24 December 2002
View caseAfter trial and appeal, liability remained for Microsoft’s unlawful maintenance of its operating-system monopoly through exclusionary conduct affecting middleware and browser competition. The 2002 final judgment resolved the federal and settling-state remedy proceedings.
- Status
- Confirmed
- Company
- Microsoft
- Authority
- United States District Court and Department of Justice
- Decision date
- 12 November 2002
View case