Europe

3903 readers

9 users here now

Europa

founded 5 years ago

MODERATORS

[email protected]

101

European Commission’s use of Microsoft 365 infringes data protection law for EU institutions and bodies (www.edps.europa.eu)

submitted 8 months ago by [email protected] to c/[email protected]

10 comments fedilink hide all child comments

Following its investigation, the EDPS has found that the European Commission (Commission) has infringed several key data protection rules when using Microsoft 365. In its decision, the EDPS imposes corrective measures on the Commission.

The EDPS has found that the Commission has infringed several provisions of Regulation (EU) 2018/1725, the EU’s data protection law for EU institutions, bodies, offices and agencies (EUIs), including those on transfers of personal data outside the EU/European Economic Area (EEA).

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 7 points 8 months ago (1 children)

Probable course of action is MSFT implementing a hotfix in the next 3-6 months, that will be nowhere near to address the topic.

Another 2 years of EDPS investigation.

Then MSFT will release another patch 3-6 months after that actually solves the issue.

But in the meantime, they would have implemented another mechanism to spy on users.

Rince and repeat.

[–] [email protected] 2 points 8 months ago

I don't think, you can hotfix this. Microsoft is a US company and therefore by US law (PATRIOT & CLOUD act) required to violate EU data protection laws (unless they retract from the EU market, of course).

I mean, that it took the EU this long to react to something that's clearly been amiss since the GDPR went into force, that certainly doesn't have my hopes high, but I don't think Microsoft needs to be involved to filibuster the enforcememt of this.