A new feature introduced by Microsoft on its popular cloud storage service, OneDrive, has raised user concerns about personal privacy. Users who tested the preview version noticed that OneDrive now uses artificial intelligence to recognize faces in photos, and that this setting is enabled by default. The main point that fueled the controversy was a curious restriction on disabling this feature.
OneDrive AI-powered facial recognition can be disabled three times a year
According to preview users, after uploading a photo from their phone to OneDrive, a new section appears in the privacy settings page. This section, called “People,” states that “OneDrive uses AI to recognize faces to help you find photos of friends and family.” When users attempt to disable this feature, they are greeted with a warning that says, “You can only disable this setting three times a year.”

While the exact reason behind this restriction is unknown, there are some theories. According to one user, it may be related to data protection laws like GDPR. Microsoft is required to delete the relevant biometric data each time users disable the feature. Repeating this process too frequently can create a significant processor load on servers. However, this raises the question of why the feature wasn’t initially offered as “optional.”
Microsoft declined to explain the reasoning behind this rule. The company issued a general statement, saying, “OneDrive inherits privacy features and settings from Microsoft 365 and SharePoint where applicable.” Thorin Klosowski, a security activist with the Electronic Frontier Foundation (EFF), reacted to the situation by saying, “Any privacy-related feature should be offered voluntarily, and companies should provide clear data so users understand the risks and benefits.”
Given Microsoft’s persistent efforts in artificial intelligence, the inclusion of this new feature by default is noteworthy. So, what are your thoughts on this new AI feature offered by Microsoft in OneDrive? Do you think it’s right that such features are enabled by default without user consent? Share your thoughts with us in the comments.