Forum Discussion
Edge should explain the privacy implications of signing into sync with a business O365 account
We appreciate your patience. Here's what our Privacy team wanted to pass along:
"Hi CharlieMan ,
Thank you for bringing this question to the Edge team. We understand your concern.
Multiple profiles in Microsoft Edge is a great feature for separating your work and personal browsing without needing multiple browsers. Your privacy matters a lot and Microsoft Edge is committed to protecting it.
Your sync data is separated by the account associated with each Microsoft Edge profile. If you're syncing your browsing data to your O365 account managed by your organization (such as your employer or school), your employer may have the ability to access that data. If you're syncing your browsing data to your personal Microsoft account, your employer will not have access to that data.
In addition, your employer may access your browsing data if your device is managed by your employer or if you are using employer-provided internet connection. If your device is managed by your organization (such as your employer or school), your organization may use centralized management tools provided by Microsoft or others to access and process your data and to control device settings (including privacy settings), device policies, software updates, data collection by us or the organization, or other aspects of your device. This is regardless of the browser you use. https://go.microsoft.com/fwlink/?LinkId=521839#mainwindowsmodule
We apologize for any confusion, but please let us know if this addresses all of your concerns and questions.
The team is working on making this content part of our published documentation, and we appreciate you bringing this to our attention!
Thanks,
Microsoft Edge Privacy"
Fawkes (they/them)
Project & Community Manager - Microsoft Edge
Deleted thanks for the reply. This highlights exactly what my point was: Edge needs to warn people about this behavior.
If you're syncing your browsing data to your O365 account managed by your organization (such as your employer or school), your employer may have the ability to access that data.
Sharing your entire browsing history with your employer (while in your work profile) has potentially serious privacy implications if the user isn't aware that it's happening.
I (now) know it does this. Will the average user know that nothing is private in their work profile, regardless of what device its on?
Repeating my feature suggestion because it's even more relevant given the response from the privacy team:
Edge should warn people about this before they complete the sync sign in process for a Business O365 account, and should repeat the warning on the Sync Settings page.
Assuming it's not hard to identify a Business account, it should be relatively easy to implement and it's the right thing to do.
I'm not saying it shouldn't be done. I'm just saying you should tell people before they make a mistake they regret.
When it comes to privacy, always over-communicate. Don't assume they know.
CharlieMan Thanks for the quick follow-up. I brought your recommendation and response to the Privacy feature team, and they wanted to thank you for the great callout and appreciated your commitment to privacy.
We're always looking for ways to improve Microsoft Edge, so perspectives like this are highly valued.
Fawkes (they/them)
Project & Community Manager - Microsoft Edge