You're right that one is distinct and specifically says that they only release individual customer data.
Since weasel wording is pretty prevalent on this topic I would note that they could still run NSA algorithms on the dataset and return the individuals that are "hits".
The voluntary keyword completely invalidates that as a reference. If the program is not voluntary - and there's no way in hell that it was - then what Microsoft just said doesn't even apply to this discussion.
