Windows 10 data collection — privacy matters

Checking and tuning your Windows 10 settings is highly recommended. I typically do this when helping clients upgrade to Windows 10 or set up a new PC. Windows 10 moved many settings from control panels to the Settings app. There’re lots of privacy settings, as I’ve mentioned previously.

I follow news about how companies collect data from PCs and other devices. This includes Internet Service Providers as well. And the growing list of intelligent personal (digital) assistants (Cortana, Siri, Alexa, Google Home) — so-called intelligent assistance has a price, eh.1  Typical Privacy Policies offer few options for controlling what data is collected and how that is shared. Few opportunities to opt-out. You need to agree or you can’t use the product or service. But sometimes you can limit how data is shared; so, reviewing those options usually is recommended.2

As a result, PC World’s recent article “Microsoft finally reveals what data Windows 10 collects from your PC” is noteworthy.

There are all kinds of new features in the Windows 10 Creators Update rolling out on April 11, but one change really sticks out. Greater transparency about the data that Microsoft collects from your PC.

All too often manufacturers and service providers intone that collecting diagnostic (or quality-of-service) data helps improve their products and services. Some of this appears reasonable. Some remains mysterious. And occasionally there are stories about excessive or inappropriate data collection (e.g., regarding some children’s Internet-connected toys). Or how such data may be stored essentially forever. And security of that data.

Microsoft published two Technet pages describing the data Microsoft collects from users on the Creators Update. There are two levels of diagnostic data: basic3 and full4. The information is quite detailed and we won’t get into it here, but if you’re interested, you can find all the nitty-gritty details in those links. Note that while the Basic listing reveals all, the Full listing is a summary of the kinds of data that setting collects.

Even the basic level can gather quite a bit of info from your PC, though in a blog post, Windows chief Terry Myerson pledges that “we only collect data at the Basic level that is necessary to keep your Windows 10 device secure and up to date.” Microsoft still offers no native way to turn off Windows 10’s diagnostic collection completely.

At least in the latest Windows 10 Update Microsoft consolidated privacy settings better.

Instead of a string of screens when you first install the new version of Windows 10, Microsoft is putting all the key privacy settings on one screen. The dashboard you’ll see depends on whether you’re already running Windows 10 on your machine or setting up a new PC for the first time.

 

Notes

  1. I am more concerned about data collection by major corporations and the many app/service providers than by the government.
  2. As well as being aware of how you voluntarily provide data when using any Internet-connected device, or even your landline or cell phone. The recent repeal of the FCC’s Internet privacy rule is concerning: “The Obama-backed rules — which would have taken effect later this year — would have banned Internet providers from collecting, storing, sharing and selling certain types of customer information without those customers’ consent. Data such as a person’s Web browsing history, app usage history and location details would have required a customer’s explicit permission before companies such as Verizon and Comcast could mine the information for advertising purposes.”
  3. “The Basic level gathers a limited set of information that is critical for understanding the device and its configuration including: basic device information, quality-related information, app compatibility, and Windows Store. When the level is set to Basic, it also includes the Security level information.” [Detailed list follows on that page.]
  4. Full telemetry level (inclusive of data collected at Basic):
    • Common Data (diagnostic header information)
    • Device, Connectivity, and Configuration data
    • Product and Service Usage data
    • Product and Service Performance data
    • Software Setup and Inventory data
    • Content Consumption data
    • Browsing, Search and Query data
    • Inking, Typing, and Speech Utterance data
    • Licensing and Purchase data