It's my understanding that companies only need to comply with GDPR when providing services to end users in the EU and that companies that comply with GDPR globally are only doing so due to resource constraints that Microsoft doesn't face.

However, I'm probably less informed on GDPR than the average HN user, so it's very possible that my understanding is off-base or incomplete.

> Does the GDPR do anything to put your concerns on this issue to rest?

If the company starts doing things right ONLY after there's some legislation making the wrong thing illegal, what does that tell you about the company?

I think you're misreading the statement - he's implying that what they actually already do is in compliance.

It will, after I see MS getting caught and going through a lawsuit which results in tools providing accountability.

MS already lets you see and delete what they collect on you at account.microsoft.com/privacy

We did a lot of work to comply and provide these tools and people still think MS is part of some grand conspiracy.

Once bitten, twice shy.

https://www.theguardian.com/world/2013/jul/11/microsoft-nsa-...

https://en.wikipedia.org/wiki/Skype_security#Eavesdropping_b...

Why do you expect people to trust corporations at their word? Specially someone like Microsoft!

> We did a lot of work to comply and provide these tools and people still think MS is part of some grand conspiracy.

Given Microsoft's history I'm not sure why you're surprised.

I doubt intelligence agencies are limited by the same standards.