This is a very good question. I suspect that at some point someone will fire up their lawyers and find an answer.
Not only that but you can’t opt out from data collection at the moment.
Not only that but you can’t opt out from data collection at the moment.
https://docs.microsoft.com/en-us/windows/privacy/basic-level...
There's enough information in there to identify a machine and user via correlation.
Here's a full analytical report: https://www.lda.bayern.de/media/windows_10_report.pdf