Microsoft — Enforcement
majorAnti-Privacy → Enforcement
Executive Summary
The European Data Protection Supervisor ruled that the European Commission's use of Microsoft 365 infringed EU data protection law. The EDPS found violations of purpose limitation, international data transfer rules, and unauthorized disclosures of personal data. The Commission was ordered to suspend all data flows to Microsoft entities outside the EU/EEA by December 2024.