The European Data Protection Supervisor offered an update into the investigation of EU institutions’ use of Microsoft products and whether it complies with the EU General Data Protection Regulation. While the investigation is still ongoing, the EDPS has found there are “serious concerns over the compliance of the relevant contractual terms with data protection rules,” as well as with Microsoft’s role as a processor for EU institutions that use its products and services. A data protection impact assessment performed by the Dutch Ministry of Justice and Security found similar issues facing member state public authorities.
Full Story