Can you gdpr them?
I am not entirely sure if you meant whether I can file a compliance complaint, yes, I/you can. The thing is, I contacted them on my own first, around July 2nd I suppose. (I lost access to this account on June 27, 2026, and today is September 17, 2026. Whoever has access to my account can basically do anything they want with it, thanks to Microsoft not caring about the law. I will also give a bit more explanation as to why our response above might be seen as harsh)
Then they sent out this form, which I filled out completely, and even attached my government ID since I was also using their wallet system for some things, so they could cross-reference it with PayPal and other banking accounts I have linked there.
The response I received was: ticket closed, we couldn't identify this as your account. I asked for the legal justification for their action, based on what legal ground/actions they initiated and they decided this wasn't my account, and waited for a while, about 15 days or so, with no response at all. Then I contacted my lawyers, and we filed a regulatory complaint in both the US and the EU, to which they responded two weeks after those complaints were filed.
The screenshot attached here is from when our patience finally ran out. We were contacted by this dude who conceals his full name (For most people, this might seem normal, but I also come from a legal military background, and it instantly bothers me, as one asks for the full name of the handling officer, they can either give up their full name, if their policy allows it, some don't which I can respect, then they can explain this and give you a numerical ID assigned by the company, so you can contact their supervisors to file a complaint about them, you can not just ignore this request as if it never came up) If a company or government official conceals their name and completely ignore that question, I know they are going to hide behind a corporate shield and try to talk down to you with arrogance. Unlawful actions take place the moment they do this. I wish to be proven wrong one day, but every single time a conversation opens like this, it ends up with them breaking the law. I just cannot tolerate this shit.) and demands a phone number.
We asked him what the legal justification was for claiming they can only verify information via phone, and stated that we would give them one if they could back it up with a legal basis from either US or EU laws. He completely ignored it, copy-pasted his exact same reply, and said, 'Let's arrange a phone call.'
We told him the same thing: a phone number will be provided if they can quote from the law stating it is mandated and that post or email is not sufficient.** He then ignored it again** and sent the exact same email. At that point, we demanded his full name, which as we expected, of course he did not give up, to avoid individual liability and he said this is Microsoft's policy. In every single correspondence, we reminded him that he is breaking transparency laws by concealing his name and that corporate policy does not supersede the law. Of course, he ignored all of this. At that point, we issued the notice above.
After this, he still sent the very same copy-paste email, lol, two or three times more. We don't even think this is a real person but AI, but it doesn't really matter. This isn't the first time I'm dealing with a big corporation pulling this kind of bullshit, but this time I got really dedicated to getting a precedent-setting decision, so I will not settle for anything. We have to take them to mediation first, for which we filled out the forms today, because it is in their terms of use and this is how they protect their public image. But I will not settle, and take it to court, seriously, fuck this shit.