How to delete a user for General Data Protection Regulation Compliance

For General Data Protection Regulation (GDPR) compliance, Microsoft 365 administrators require a mechanism for deleting users who have revoked consent to use the Microsoft 365 platform. Schools must ensure all records associated with revoked consent are purged from Microsoft 365.

Student Information System (SIS) / Student Management System (SMS) source data

First, ensure the settings and configurations are correct in your source system to no longer provide source data for the user to School Data Sync (SDS).

If the source system isn't configured correctly, then even after you perform the steps below, the user will reappear.

School Data Sync (SDS)

Next, you need to send a request to have the users' data removed from SDS. The support ticket must state clearly the request for a GDPR Delete from SDS and contain the user object ID to be deleted.

• Subject: GDPR Request to Delete from SDS
• Tenant Id:
• User Object Id:

Admin privacy dashboard

Don't forget to go to the Privacy Dashboard for your tenant and delete the user from other services including Microsoft Entra ID.