Microsoft Dynamics 365 and GDPR

The General Data Protection Regulation (GDPR) is fundamentally about protecting and enabling the privacy rights of individuals. You can read more about the Microsoft commitment to security at the Microsoft Trust Centre.

Microsoft Dynamics 365 is committed to helping our customers meet their GDPR requirements. In this topic, you will find information and several resources to help you understand how Microsoft Dynamics supports the GDPR, and how we provide the information and tools that our customers need in order to define and support their GDPR obligations.

Here are the types of information that we have additional information about:

White papers

The following white papers provide an overview of the GDPR for Dynamics 365 applications and services. They also suggest an approach for how you can think about enhancing your data protection capabilities and how you might want to think about compliance with the GDPR as a process that has four stages: Discover, Manage, Protect, and Report.

What GDPR means for your business applications: the IDC analyst's view

Model-driven apps in Dynamics 365

Finance, Retail, and Talent


On-premises products



Data Subject Requests

The GDPR grants individuals (or data subjects) certain rights in connection with the processing of their personal data. These rights include the right to correct inaccurate data, erase their data or restrict its processing, receive their data, and fulfill a request to transmit their data to another controller. The resources in this section will help Dynamics 365 customers respond to Data Subject Requests (DSRs).

DSRs on the Service Trust Portal – You can find information about what the GDPR requires of controllers (you) and processors (Microsoft) when you respond to DSRs, and how Microsoft enables you to do so.

The Relevance Search report is available for Customer Service, Field Service, Marketing, Project Service Automation, and Sales.

The following resources can help administrators and customizers configure Relevance Search:

Resources to help administrators and customizers configure Relevance Search:

Resources to help users get started with Relevance Search:

Person search report

The Person search report is available for Finance, Retail, and Talent Core HR.

Compliance Manager

Compliance Manager is a cross–Microsoft cloud services solution that is designed to help organizations meet complex compliance obligations like the GDPR. It does real-time risk assessment that reflects your compliance posture against data protection regulations when you use Microsoft cloud services. It also provides recommended actions and step-by-step guidance.

You can try Compliance Manager by visiting the Service Trust Portal and downloading it. See the following Compliance Manager support page to get started: Use Compliance Manager to help meet data protection and regulatory requirements when using Microsoft cloud services.

Compliance Manager blog posts

Compliance Manager white papers and datasheets

Compliance Manager videos


Hear from Microsoft about how we support the GDPR, and learn how we are helping our Microsoft Dynamics customers support their GDPR requirements.

Blog posts

Hear from Microsoft about the GDPR, what it means to our customers, and what it means to us as a corporation.


Get deeper knowledge about Microsoft, the GDPR, and our own GDPR journey.