EURACTIV reports acting European Data Protection Supervisor Wojciech Wiewiórowski has reiterated that EU institutions are not fully informed on the extent of their data sharing with Microsoft. Wiewiórowski said institutions "are not aware of all the data which is collected" under the provisions of their products and services agreements, which may violate Regulation (EU) 2018/1725. The EDPS, which first alerted institutions to contractual issues last month, has published guidelines to better explain the concepts of controller, processor and joint controllership to institutions.
Full Story