Companies / Microsoft (Outlook, Teams)

Microsoft (Outlook, Teams)

Scans under Chat Control — confirmed

Outlook.com · Microsoft Teams · Skype (retired 2025) · GroupMe

LinkedIn — also a Microsoft company, and files its own derogation report. LinkedIn's record →

Scans under the EU's Chat Control — assessed 26 Jul 2026

Files the derogation's own transparency reports — reports that exist only for providers scanning under Chat Control (COM(2025) 740 names Microsoft among the five filers for both 2023 and 2024); its EU jurisdictional transparency reports cover the same ground. Microsoft co-developed PhotoDNA, the hash-matching technology much of this scanning runs on. Skype, historically the flagship covered service, was retired in 2025; the 2025 reports are filed separately for Outlook, Teams, GroupMe and Skype.

“We use scanning technologies (like hash matching) to help prevent harm to our systems, our users, and others as described in our Code of Conduct, and to help prevent child exploitation.” — from Microsoft (Outlook, Teams)'s privacy statement, as archived here

Sources: COM(2025) 740 — Commission implementation report · Microsoft jurisdictional transparency reports · what this status means · dispute it

Which services the evidence names

Microsoft publishes a separate derogation report for each service it scans under. Under its own “EU Regulation 2021/1232” heading, the 2025 reports are filed for these four. This is the provider naming its own services, which is better evidence than anyone else describing them.

Named Outlook.com, Microsoft Teams, Skype (retired 2025), GroupMe — named in Microsoft jurisdictional transparency reports, archived here: EU CSAM Interim Regulation Report (GroupMe) EU CSAM Interim Regulation Report (Outlook) EU CSAM Interim Regulation Report (Skype) EU CSAM Interim Regulation Report (Teams)

Sources differ Xbox messaging is also operated by Microsoft, and Breyer’s overview lists Xbox among derogation services — but Microsoft’s own reports do not file for it. Where the provider and a third party disagree, this page shows what the provider files, and says that the other source differs.

The Commission's report, which is what puts Microsoft in this group at all, names the provider and not the service. That is why the two lines above are separate.

What we watch for — Microsoft files the derogation's transparency reports today. We watch for the reports stopping, scanning language disappearing from these documents, and what replaces the legal basis when the derogation expires in April 2028.

Services: Outlook.com, Microsoft Teams, Skype (retired 2025), GroupMe, Xbox messaging (evidence names Outlook.com, Microsoft Teams, Skype (retired 2025), GroupMe)
Status: Scans under Chat Control — confirmed
Held since: 26 Jul 2026
Documents: 4 tracked
App Store label: Tracked
Changes recorded: 5 — latest 2 Sep 2026

Tracked documents

Document	Last fetched	Size	Hash	Snapshot
Privacy Statement privacy.microsoft.com	31 Jul 2026	214,622 chars	212fda7a5697	text · raw · wayback
EU jurisdictional transparency reports www.microsoft.com	1 Sep 2026	9,537 chars	068fb23d41e6	text · raw · wayback
PhotoDNA www.microsoft.com	2 Sep 2026	5,440 chars	ced87f7439fb	text · raw · wayback
Google Play Data Safety play.google.com	26 Jul 2026	2,728 chars	a4ec4c055aa9	text · raw · wayback

text is the extracted record we hash and diff; raw is the page's original HTML kept verbatim as evidence — it renders without its styling here, by design.

App Store privacy label — Microsoft Outlook

Apple requires every app to declare the data it collects. This is Microsoft (Outlook, Teams)'s current declaration, as shown on the App Store; ScanRecords records when it changes.

Data Used to Track You

Usage Data

Data Linked to You

Contact Info
Contacts
User Content
Search History
Identifiers
Usage Data
Diagnostics

Data Not Linked to You

Location

What we searched for

A status that rests on absence is only as good as the search behind it. Every one of Microsoft (Outlook, Teams)'s 4 archived documents (232,331 characters) was searched for the same published vocabulary used on every company here — in English, German and French. The search is a plain function of the archived text and re-runs whenever that text changes, so it always describes the documents listed above. Re-run it against this archive yourself with tools/scan-terms.mjs.

Term	Hits	In context
Regulation 2021/1232	2	“…Regulation Report 2022 Microsoft Transparency Report – EU Terrorist Content Regulation Report EU Regulation 2021/1232 Regulation (EU) 2021/1232 is a regulation of the European Parliament and of the Council of the EU on a tempor…” — eu-reports “…crosoft Transparency Report – EU Terrorist Content Regulation Report EU Regulation 2021/1232 Regulation (EU) 2021/1232 is a regulation of the European Parliament and of the Council of the EU on a temporary derogation from certai…” — eu-reports
derogation / Ausnahmeregelung / dérogation	1	“…ulation (EU) 2021/1232 is a regulation of the European Parliament and of the Council of the EU on a temporary derogation from certain provisions of Directive 2002/58/EC concerning the use of technologies by providers of number-ind…” — eu-reports
CSAM / CSAE	7	“…t to the National Center for Missing and Exploited Children (NCMEC). 2025 Microsoft Transparency Report – EU CSAM Interim Regulation Report (GroupMe) 2025 Microsoft Transparency Report – EU CSAM Interim Regulation Report (O…” — eu-reports “…oft Transparency Report – EU CSAM Interim Regulation Report (GroupMe) 2025 Microsoft Transparency Report – EU CSAM Interim Regulation Report (Outlook) 2025 Microsoft Transparency Report – EU CSAM Interim Regulation Report (S…” — eu-reports “…oft Transparency Report – EU CSAM Interim Regulation Report (Outlook) 2025 Microsoft Transparency Report – EU CSAM Interim Regulation Report (Skype) 2025 Microsoft Transparency Report – EU CSAM Interim Regulation Report (Tea…” — eu-reports
child sexual abuse / Kindesmissbrauch	3	“…nal communications services for the processing of personal and other data for the purpose of combating online child sexual abuse. In scope electronic communication service providers are required to publish an annual transparency report on…” — eu-reports “…his regulation. This report provides insight into the use of technologies for the purpose of combating online child sexual abuse in the European Union and reporting such content to the National Center for Missing and Exploited Children (N…” — eu-reports “…rities. We also use tools to detect and disrupt the misuse of video-calling capabilities to produce and share child sexual exploitation and abuse imagery by high-risk users. Learn more about our efforts to prevent and detect child exploitation h…” — privacy
NCMEC / CyberTipline	7	“…e in the European Union and reporting such content to the National Center for Missing and Exploited Children (NCMEC). 2025 Microsoft Transparency Report – EU CSAM Interim Regulation Report (GroupMe) 2025 Microsoft Transparen…” — eu-reports “…ses PhotoDNA technology? Microsoft donated PhotoDNA to the National Center for Missing & Exploited Children (NCMEC). NCMEC is the United States clearinghouse and comprehensive reporting center for all issues related to the p…” — photodna “…oDNA technology? Microsoft donated PhotoDNA to the National Center for Missing & Exploited Children (NCMEC). NCMEC is the United States clearinghouse and comprehensive reporting center for all issues related to the preventio…” — photodna
PhotoDNA	22	“Skip to main content Microsoft PhotoDNA PhotoDNA PhotoDNA Home PhotoDNA Cloud Service FAQ Documentation Terms of Use Contact Us More All Mi…” — photodna “Skip to main content Microsoft PhotoDNA PhotoDNA PhotoDNA Home PhotoDNA Cloud Service FAQ Documentation Terms of Use Contact Us More All Microsoft G…” — photodna “Skip to main content Microsoft PhotoDNA PhotoDNA PhotoDNA Home PhotoDNA Cloud Service FAQ Documentation Terms of Use Contact Us More All Microsoft Global Mic…” — photodna
hash matching / hash database	1	“…to block communications or remove content that violates our terms of use. We use scanning technologies (like hash matching) to help prevent harm to our systems, our users, and others as described in our Code of Conduct, and to he…” — privacy
scan / scanning / gescannt	3	“…vities. We reserve the right to block communications or remove content that violates our terms of use. We use scanning technologies (like hash matching) to help prevent harm to our systems, our users, and others as described in…” — privacy “…tect your device when no other antimalware software is running and monitors your device’s security status and scans for malware, unwanted software, and potentially harmful apps. When Microsoft Defender Antivirus is turned on…” — privacy “…PC Manager is a desktop tool aimed at boosting your PC’s performance. Based on your request, PC Manager will scan your device, and allow you to delete unneeded or temporary documents, optimize cache, stop or recover from un…” — privacy
monitor content / review content	2	“…nguage are examples of connected experiences. There are two types of connected experiences. Experiences that analyze your content . Experiences that use your file content to provide you with design recommendations, editing suggestions, dat…” — privacy “…ying service secure, up to date, and performing as expected. If you choose to use a connected experience that analyzes your content — for example Translate in Word — the text you typed and selected to translate is also sent and processed to…” — privacy

Found nowhere in these documents: Chat Control / Chatkontrolle · ePrivacy · Internet Watch Foundation · automated detection / automatisierte Erkennung · classifier / machine learning detection

Record RSS ↗

2 Sep 2026 Microsoft (Outlook, Teams) — PhotoDNA document +157 −0
1 Sep 2026 Microsoft (Outlook, Teams) — EU jurisdictional transparency reports document +2 −0
1 Sep 2026 Microsoft (Outlook, Teams) — PhotoDNA document +0 −157
31 Jul 2026 Microsoft (Outlook, Teams) — Privacy Statement document +51 −53
28 Jul 2026 Microsoft (Outlook, Teams) — EU jurisdictional transparency reports document +1 −0
26 Jul 2026 Microsoft (Outlook, Teams) — Google Play Data Safety baseline first recording
26 Jul 2026 Microsoft (Outlook, Teams) — PhotoDNA baseline first recording
26 Jul 2026 Microsoft (Outlook, Teams) — EU jurisdictional transparency reports baseline first recording
26 Jul 2026 Microsoft (Outlook, Teams) — App Store privacy label baseline first recording
26 Jul 2026 Microsoft (Outlook, Teams) — Privacy Statement baseline first recording