European Data Protection Supervisor (EDPS) launched investigation on Microsoft agreements with European organizations. During the investigation supervisor hopes to study if points of the agreement accord with General Data Protection Rules (GDPR).
EDPS initiated investigation after Netherlands’ authorities revealed violations of GDPR in Microsoft Office ProPlus and Office 365 in November 2018. Considering this fact, Supervisor published notification about “increased risk of rights and freedoms limitations” for all European organizations that use these applications.“The EU institutions rely on Microsoft services and products to carry out their daily activities. This includes the processing of large amounts of personal data. Considering the nature, scope, context and purposes of this data processing, it is vitally important that appropriate contractual safeguards and risk-mitigating measures are in place to ensure compliance with the new regulation”, — said the EDPS.
EDPR noted that European organizations widely use Microsoft Office and detected in Office ProPlus and Office 365 violations affect all exploiting them companies.
Microsoft have already taken measures to improve detected issues. In February 2019, company declared intention to complete changes in the algorithm of data collection to make their product fitting GDPR requirements.
Microsoft also committed to assist clients in following GDPR standards.
“We stand ready to help our customers answer any questions the European Data Protection Supervisor may have” , – declared company in the recent statement.
Source: https://www.infosecurity-magazine.com/news/eu-launches-gdpr-probe-into-1/
