Microsoft 365 In Breach of GDPR
German data protection authorities have found that Microsoft 365 (aka Microsoft Office) is in breach of the General Data Protection Regulation (GDPR), reports Jude Karabus.
The latest report from the DSK says that “many of the services included in Microsoft 365 require Microsoft to access the unencrypted, non-pseudonymized data."
This means that the office suite is “not suitable for legally compliant use in schools or public authorities in Germany, although it won't affect use by businesses or consumers,” says Karabus.
Microsoft disputes the report saying: “We ensure that our M365 products not only meet, but often exceed, the strict EU data protection laws.”
Read more at The Register.
12/06/2022
Related content
-
Data Security vs. Data Protection
Data protection and data security are similar-sounding aspects of information security: one legal and one technical. - GDPR Compliance Tips for Cloud Storage
-
Privacy Concerns: Beyond the GDPR
May 25, 2018, marked a significant milestone for privacy advocates around the world. It was General Data Protection Regulation (GDPR) Day. I'm not sure anyone calls it that officially, but I'm calling it that unofficially. -
News for Admins
Microsoft Starts Using AI for Enterprise Security, New Zero-Day Vulnerability Affects All Windows Systems, British Airways Breach Affects 380,000 Customers
-
Data loss prevention with Microsoft Purview
Microsoft Purview combines compliance and data governance to address the security of confidential data in the new hybrid working world.