MyAnalytics privacy guide

MyAnalytics helps you find opportunities to build better habits and get back in control of your time. This article describes how MyAnalytics works, what data it uses, where it stores that data, and the ways in which it was designed to keep that data safe. It also describes how MyAnalytics complies with GDPR regulations.

Summary of key points

  • MyAnalytics is not designed to enable evaluation, tracking, automated decision making, profiling, or monitoring. MyAnalytics provides you with insights through a personalized dashboard, a weekly digest, the Insights Outlook add-in, and inline suggestions in Outlook. MyAnalytics has no mechanism or option that allows anyone but you to access the personalized information that is displayed through these surfaces, unless you purposefully and independently share it. Insights provided by MyAnalytics cannot be used for automated decision making or for profiling.

  • MyAnalytics does not give employees access to new personally identifiable information on other coworkers. MyAnalytics converts data into insights by doing calculations on information that you generate just by going about your work day. Most of the data that you see in MyAnalytics is simply an aggregation of information to which you already have access, but that you wouldn’t be able to quickly perform calculations on without some support.

  • MyAnalytics data is processed and stored in the employee’s Exchange Online mailbox. MyAnalytics processes data from these sources: Exchange Online email and calendar data, chat and call signals from Skype for Business and from Teams, and—if both you and your organization's IT administrator opt you in—Windows 10 application activity history. MyAnalytics stores and processes this data inside each employee’s Exchange Online mailbox.

  • MyAnalytics supports General Data Protection Regulation (GDPR) compliance. Microsoft has designed MyAnalytics to support your organization’s needs to follow GDPR requirements.

MyAnalytics architecture

In the following architecture illustration, note the relationship of MyAnalytics to Exchange Online. This placement underscores the fact that any data that you can view in MyAnalytics is the same data that's visible in your Exchange mailbox, as described in the following principles about data privacy.

Key principles

  • As a MyAnalytics user, only you can see your own data.
  • Your data is stored and computed in your Exchange Online mailbox.
  • You can opt in and opt out at any time.
  • MyAnalytics shows you no personally identifiable info of co-workers beyond what you can already see in Outlook and Teams.

Outlook inbox

How MyAnalytics works

MyAnalytics presents insights in the following ways:

  1. Personal dashboard

  2. Insights Outlook add-in

  3. Weekly digest

  4. Inline suggestions in Outlook

Data types

MyAnalytics provides insights with the following types of data.

  1. Mailbox data – Email, calendar, chat, and call activity that you generate by using Microsoft 365, such as time that you spend in meetings or emails that you send to a specific person or group.

  2. Windows 10 activity history data – Data on your usage of apps and services on your device: whether you worked on a document and whether you browsed the web.

  3. Incremental data – Data that would otherwise be unavailable to you but is presented in an aggregated form designed to protect individual privacy.

Mailbox data

Mailbox data represents information that you already have access to simply by going about your job, such as sending emails, arranging meetings, or chatting with coworkers. MyAnalytics processes and displays this information in ways that make it actionable.

For example, MyAnalytics provides views that allow you to quickly understand how much time you spend in meetings and in email every day, who you collaborate with the most, who you are losing touch with, and to whom you have made commitments and requests.

You can take action on this information. You might decide that you spend too much time in meetings, for example, and adopt a personal goal of running more efficient meetings.

These insights are derived from data that is already available to you in the following places:

  • Your Exchange Online mailbox
  • Your activity in OneDrive and SharePoint documents
  • Your chat and call history from Teams and from Skype for Business

MyAnalytics simply applies some basic calculations and rules to make this data more actionable. Mailbox data is stored directly in your Exchange Online mailbox.

For example, if you want to determine which colleagues sent you the most email over the past week, you could technically do so without MyAnalytics by manually counting emails from coworkers in your inbox. Similarly, you could determine your coworkers’ average response time to the emails that you sent them by using the timestamp information readily available in your mailbox. MyAnalytics saves you the trouble of having to perform these tedious calculations.

Windows 10 Activity History data

Windows 10 activity history data refers to the things you do on your device, such as the apps and services you used, whether you worked on a document, and whether you browsed the web. The activity history is stored locally on the device, and if you're signed in to the device with a Microsoft account and you give permission, Windows sends the activity history to Microsoft.

MyAnalytics uses Windows 10 activity history data to compute insights (for example, time spent in apps, multi-tasking in meetings) about your work habits. These insights are private and stored in your Exchange Online mailbox.

Also note that, if you choose to send Windows 10 activity history to MyAnalytics,  activity data is saved even if you use a non-work or non-school account (for example, a personal live.com or facebook.com account) to connect to the app or service. However, activity data is not saved when you browse with InPrivate tabs or windows in the Microsoft Edge web browser.

Incremental data

In a few cases, MyAnalytics provides you with de-identified information on other people that would not have otherwise been available to them, such as for Email read rates.

Email read rates

MyAnalytics tracks the percentage of recipients who opened an email message (in the Outlook add-in) for email that you’ve sent to five or more people.

To preserve privacy, MyAnalytics does not track read rates for messages sent to fewer than five people. MyAnalytics also doesn't show read rates of "0%" or "100%," as that would allow people to make definitive conclusions about individual coworker actions. Instead, the read rate in these cases is displayed as a range that encompasses a threshold value that depends on the number of recipients of the email.

This metric is calculated based on the "read" flag in Exchange Online. For some people, messages are flagged as "read" when you open a message in the Outlook preview pane. For others, you might need to double-click to open the message to mark it as "read."

You can control this setting in your Outlook settings. To show these signals in the sender’s mailbox, the “read” flag is copied within the Microsoft 365 environment, and then delivered to the sender’s mailbox.

How you can opt-in and opt-out

You can opt-in or opt-out of MyAnalytics through Settings. For details, see Opt out of MyAnalytics.

GDPR Compliance

As is the case with the full Microsoft 365 suite, MyAnalytics helps support compliance with GDPR requirements. For example, MyAnalytics supports the following:

  • Secure and protect personal data. Because all MyAnalytics data is stored in your Exchange Online mailbox, MyAnalytics meets this security obligation by virtue of Exchange Online also meeting the obligation.

  • Requests to export, delete, or restrict processing personal data. Microsoft supports user requests, such as requests for export of or deletion of data.

For more information, see GDPR compliance.