{"id":212286,"date":"2024-03-12T00:36:40","date_gmt":"2024-03-12T00:36:40","guid":{"rendered":"https:\/\/michigandigitalnews.com\/index.php\/2024\/03\/12\/european-commission-breached-privacy-laws-with-microsoft-software-use\/"},"modified":"2025-06-25T17:20:49","modified_gmt":"2025-06-25T17:20:49","slug":"european-commission-breached-privacy-laws-with-microsoft-software-use","status":"publish","type":"post","link":"https:\/\/michigandigitalnews.com\/index.php\/2024\/03\/12\/european-commission-breached-privacy-laws-with-microsoft-software-use\/","title":{"rendered":"European Commission breached privacy laws with Microsoft software use"},"content":{"rendered":"

[ad_1]
\n
<\/p>\n

\n

The European Commission\u2019s use of Microsoft<\/a> software is in breach of data protection laws.<\/p>\n

Following a probe by the European Union\u2019s<\/a> (EU) privacy regulator, the bloc\u2019s executive body was also made aware that it had failed to put in place adequate safeguards for the transfer of personal data to non-EU states.<\/p>\n

The European Data Protection Supervisor (EDPS) announced its findings<\/a> after the investigation began in May 2021. The infringements relate to several data protection rules.<\/p>\n

\u201cIn particular, the Commission has failed to provide appropriate safeguards to ensure that personal data transferred outside the EU\/EEA are afforded an essentially equivalent level of protection as guaranteed in the EU\/EEA,\u201d wrote the EDPS.<\/p>\n

\u201cFurthermore, in its contract with Microsoft, the Commission did not sufficiently specify what types of personal data are to be collected and for which explicit and specified purposes when using Microsoft 365.\u201d<\/p>\n

The EEA, or European Economic Area, consists of the 27 EU countries and Iceland, Liechtenstein, and Norway. The EU has data accords in place with 16 countries, including Argentina, Japan, South Korea, Switzerland, the United Kingdom, and the US.<\/p>\n

\n

In its investigation, the #EDPS<\/a> @W_Wiewiorowski<\/a> has found that the @EU_Commission<\/a> has infringed several key data protection rules when using Microsoft 365. In its decision, the EDPS imposes corrective measures on the Commission. Read Press Release:https:\/\/t.co\/XsMDnsfSGk<\/a> pic.twitter.com\/shvufa3KUx<\/a><\/p>\n

\u2014 EDPS (@EU_EDPS) March 11, 2024<\/a><\/p>\n<\/blockquote>\n

European Commission response to EDPS censure<\/h2>\n

The European Commission has been instructed to cease all data flows through its use of Microsoft 365 to the tech giant parent company and any of its associated firms that may be located outside the EU or any jurisdiction where there is no data agreement in place.<\/p>\n

A deadline of 9 December 2024 has been set for the EC to comply with the order.<\/p>\n

Wojciech Wiewi\u00f3rowski, the European Data Protection Supervisor, spoke on what EU bodies expect to have the relevant protections in place.<\/p>\n

\u201cIt is the responsibility of the EU institutions, bodies, offices, and agencies (EUIs) to ensure that any processing of personal data outside and inside the EU\/EEA, including in the context of cloud-based services, is accompanied by robust data protection safeguards and measures, he stressed.<\/p>\n

\u201cThis is imperative to ensure that individuals\u2019 information is protected.\u201d<\/p>\n

Image credit: Karolina Grabowska\/Pexels<\/em><\/p>\n<\/p><\/div>\n