The dispute puts a consequential question before the court: where does authorized educational data processing end, and allegedly improper use begin? Microsoft’s published privacy commitments provide useful context, but they do not, by themselves, establish what happened to these students’ information.
What the students allege
The case is A.W. et al. v. Microsoft Corporation, No. 26-2-26702-2, in King County Superior Court. EdTech Law Center, which represents the plaintiffs, lists the complaint’s filing date as August 14, 2026. Its case summary describes allegations involving Microsoft 365, Windows, Edge and related tools that students are required to use for schoolwork.
The students contend that Microsoft collects sensitive information, uses it to construct detailed profiles and generate student analytics, and commercializes that information without informed parental consent. Their lawyers also allege that Microsoft shifts responsibility for obtaining consent to school districts while retaining control over its data systems. The suit seeks injunctive relief and statutory damages under Washington consumer-protection and privacy laws. These remain allegations, not established findings.
What Microsoft’s dismissal request establishes—and what it does not
Law360 identifies two grounds in Microsoft’s challenge: federal preemption of certain claims and the students’ asserted lack of a reasonable expectation of privacy. However, its accessible report does not explain which individual claims the preemption argument targets or provide the full factual basis for Microsoft’s privacy position. Assigning those arguments to particular products or causes of action would go beyond the available evidence.
The procedural distinction matters. The reported development is a request to dismiss a proposed class action—not a dismissal, a finding that the alleged practices were lawful, or confirmation of a court-certified class. The available report establishes none of those outcomes.
Microsoft’s own privacy promises frame the dispute
Microsoft’s current Privacy Statement makes specific commitments for products supplied by K–12 schools, expressly including Microsoft 365 Education. The company says it limits student-data collection and use to authorized educational or school purposes, does not sell or rent that information, and does not use or share it for advertising or similar commercial purposes.
Its profiling commitment is more qualified: Microsoft says it will not build personal student profiles except to support authorized educational or school purposes, or with authorization from a parent, guardian or student of appropriate age. That distinction is important. A promise limiting profiling is not a statement that educational analytics never occurs. Nor does the published policy prove or disprove compliance in this case.
The practical takeaway for schools and families
For families seeking information about a school-managed Microsoft account, Microsoft’s Privacy Statement directs users to their organization for questions about accessing and controlling personal data. In a school setting, that makes the district or school’s designated administrator a practical starting point—not an assumption that a personal Microsoft account’s privacy dashboard covers everything. Microsoft explicitly notes that its tools do not expose all personal data it processes.
For education IT teams, the useful distinction is between published commitments, actual processing and legal findings. This case challenges the relationship between those first two; Microsoft’s dismissal request asks the court to reject claims arising from that challenge. Neither side’s position should be mistaken for the court’s answer.