Windows GDID: Microsoft confirms an unremovable hardware identifier

A Microsoft confirmation, revealed in an FBI court case, describes a persistent machine identifier across reinstallations and without opt-out. The political surface is larger than the technical surface.

The fact

On July 12, 2026, Ghacks reported a confirmation from Microsoft - documented in an FBI legal file cited by the article - of the existence of an identifier called GDID (Global Device ID) assigned to each Windows installation. This identifier persists through reinstalls, is not listed in privacy settings, and has no documented opt-out.

Our analysis

Technically, this is not a scoop: persistent hardware identifiers have long existed in Windows (Machine SID, hardware hash for licensing). Politically, it is: Microsoft officially confirms the existence and stability of this identifier in a legal context - not in public documentation.

The problem is not the identifier itself (useful for licensing, legitimate telemetry). It's the lack of discoverability and control. GDPR version: what is not declared cannot be consented to.

To watch

• A formal response from Microsoft to the DSA/GDPR (Brussels has been aware of this type of identifier for several years).
• Public technical documentation - will Microsoft publish the spec, or continue to treat it as an implementation detail?
• Equivalent investigations at Apple/Google - the issue goes beyond Windows, it is structural.