🎉 First WIN of 2026: the Austrian DPA has ordered Microsoft to stop tracking school children
noyb.eu/en/noyb-win-...
noyb.eu/en/noyb-win-...
noyb win: Microsoft ordered to stop tracking school children
The DSB decided that Microsoft unlawfully placed tracking cookies on the devices of a pupil
noyb.eu
January 27, 2026 at 7:34 AM
🎉 First WIN of 2026: the Austrian DPA has ordered Microsoft to stop tracking school children
noyb.eu/en/noyb-win-...
noyb.eu/en/noyb-win-...
🚨 BREAKING: Microsoft illegally tracked students, data watchdog finds.
The Austrian DPA has ruled that Microsoft 365 Education used tracking cookies without consent — illegally collecting student data - following a complaint supported by @noyb.eu
noyb.eu/en/noyb-win-...
The Austrian DPA has ruled that Microsoft 365 Education used tracking cookies without consent — illegally collecting student data - following a complaint supported by @noyb.eu
noyb.eu/en/noyb-win-...
October 10, 2025 at 6:06 PM
🚨 BREAKING: Microsoft illegally tracked students, data watchdog finds.
The Austrian DPA has ruled that Microsoft 365 Education used tracking cookies without consent — illegally collecting student data - following a complaint supported by @noyb.eu
noyb.eu/en/noyb-win-...
The Austrian DPA has ruled that Microsoft 365 Education used tracking cookies without consent — illegally collecting student data - following a complaint supported by @noyb.eu
noyb.eu/en/noyb-win-...
🎉 Big #WIN for student privacy! 🔒 Austria’s DPA has issued a decision finding that #Microsoft 365 Education illegally tracks pupils and uses student data for Microsoft's own purposes.
📰 Read the full blog post, including a comment by Max #Schrems 👉 noyb.eu/en/noyb-win-...
📰 Read the full blog post, including a comment by Max #Schrems 👉 noyb.eu/en/noyb-win-...
noyb win: Microsoft 365 Education tracks school children
Favorable decision by the Austrian DSB: Microsoft Education 365 may not track school kids and Microsoft is ordered to provide full access to kids' data.
noyb.eu
October 10, 2025 at 7:38 AM
🎉 Big #WIN for student privacy! 🔒 Austria’s DPA has issued a decision finding that #Microsoft 365 Education illegally tracks pupils and uses student data for Microsoft's own purposes.
📰 Read the full blog post, including a comment by Max #Schrems 👉 noyb.eu/en/noyb-win-...
📰 Read the full blog post, including a comment by Max #Schrems 👉 noyb.eu/en/noyb-win-...
📰🧒 "The DSB, #Austria’s data protection authority, has ruled that #Microsoft is illegally #tracking students with Microsoft 365 Education and uses student data for its own purposes."
👇 Read the full article, including a comment by Max Schrems 👇
👇 Read the full article, including a comment by Max Schrems 👇
Austria says Microsoft illegally tracked school kids with 365
Microsoft accused of illegally tracking students, Austrian DPA rules
cybernews.com
October 13, 2025 at 10:00 AM
📰🧒 "The DSB, #Austria’s data protection authority, has ruled that #Microsoft is illegally #tracking students with Microsoft 365 Education and uses student data for its own purposes."
👇 Read the full article, including a comment by Max Schrems 👇
👇 Read the full article, including a comment by Max Schrems 👇
Tracked by #Microsoft, but nobody takes responsibility 🎯🍪
When the Austrian DPA asked Microsoft about tracking cookies in Microsoft 365, they claimed to only be a sub-processor, despite the school not being able to configure or decide on the cookies.
#MakePrivacyReality
When the Austrian DPA asked Microsoft about tracking cookies in Microsoft 365, they claimed to only be a sub-processor, despite the school not being able to configure or decide on the cookies.
#MakePrivacyReality
April 25, 2025 at 12:15 PM
Tracked by #Microsoft, but nobody takes responsibility 🎯🍪
When the Austrian DPA asked Microsoft about tracking cookies in Microsoft 365, they claimed to only be a sub-processor, despite the school not being able to configure or decide on the cookies.
#MakePrivacyReality
When the Austrian DPA asked Microsoft about tracking cookies in Microsoft 365, they claimed to only be a sub-processor, despite the school not being able to configure or decide on the cookies.
#MakePrivacyReality
According to the Austrian DPA, Microsoft US serves as the data controller when cookies are set on a minor’s device via Microsoft 365 Education. Under these circumstances, the DPA was competent to enforce GDPR against Microsoft US.
lnkd.in/efqAX3jK.
lnkd.in/efqAX3jK.
January 27, 2026 at 1:25 PM
According to the Austrian DPA, Microsoft US serves as the data controller when cookies are set on a minor’s device via Microsoft 365 Education. Under these circumstances, the DPA was competent to enforce GDPR against Microsoft US.
lnkd.in/efqAX3jK.
lnkd.in/efqAX3jK.
“Although Microsoft is used up and down the UK by police and law enforcement bodies, so far only SPA – and now Police Scotland – have asked the important questions: Where does our data go? Do you have a map or data flow model? What assurances can you give us around our regulatory DPA Part 3 needs?"
Scottish police do not know where their sensitive data is going, because they trusted it to an American multinational (Microsoft) which simply refuses to tell them.
Remember this when the US screams about Europe wanting to regulate the big tech players.
Remember this when the US screams about Europe wanting to regulate the big tech players.
Microsoft refuses to divulge data flows to Police Scotland | Computer Weekly
Tech giant Microsoft is refusing to divulge key information to Police Scotland about where the sensitive data it uploads to Office 365 will be processed, leaving the force unable to comply with UK-wid...
www.computerweekly.com
August 30, 2025 at 12:11 PM
“Although Microsoft is used up and down the UK by police and law enforcement bodies, so far only SPA – and now Police Scotland – have asked the important questions: Where does our data go? Do you have a map or data flow model? What assurances can you give us around our regulatory DPA Part 3 needs?"
Microsoft neue DPA
EU US Privacy Framework is nun ein Teil der AGB
#teamdatenschutz Grüße aus Redmond
www.rakoellner.de/2023/11/eine...
EU US Privacy Framework is nun ein Teil der AGB
#teamdatenschutz Grüße aus Redmond
www.rakoellner.de/2023/11/eine...
November 17, 2023 at 5:26 PM
Microsoft neue DPA
EU US Privacy Framework is nun ein Teil der AGB
#teamdatenschutz Grüße aus Redmond
www.rakoellner.de/2023/11/eine...
EU US Privacy Framework is nun ein Teil der AGB
#teamdatenschutz Grüße aus Redmond
www.rakoellner.de/2023/11/eine...
Mitglieder der Initiativen sind neben dem WDR große Tech- und Medienunternehmen wie Adobe, Microsoft, Nikon, Sony, The New York Times, die BBC, die dpa Deutsche Presse-Agentur GmbH und seit kurzem auch OpenAI.
➡️ c2pa.org
➡️ c2pa.org
July 29, 2024 at 3:40 PM
Mitglieder der Initiativen sind neben dem WDR große Tech- und Medienunternehmen wie Adobe, Microsoft, Nikon, Sony, The New York Times, die BBC, die dpa Deutsche Presse-Agentur GmbH und seit kurzem auch OpenAI.
➡️ c2pa.org
➡️ c2pa.org
The DPA found that Microsoft:
🍪 used tracking cookies without consent
🍪 did not provide full access to information about user's data
And when students tried to exercise their GDPR rights, nobody would give them a straight answer.
🍪 used tracking cookies without consent
🍪 did not provide full access to information about user's data
And when students tried to exercise their GDPR rights, nobody would give them a straight answer.
October 10, 2025 at 6:06 PM
The DPA found that Microsoft:
🍪 used tracking cookies without consent
🍪 did not provide full access to information about user's data
And when students tried to exercise their GDPR rights, nobody would give them a straight answer.
🍪 used tracking cookies without consent
🍪 did not provide full access to information about user's data
And when students tried to exercise their GDPR rights, nobody would give them a straight answer.
🔥 Protokoll der #Datenschutz-konferenz: #Microsoft365 trotz Data Boundary und DPA vom Januar 2023 kritisch. - www.linkedin.com/posts/stefan.... #DSGVO #M365
Stefan Hessel on LinkedIn: #datenschutz #dsgvo #microsoft #microsoft365 #m365
🔥 𝗣𝗿𝗼𝘁𝗼𝗸𝗼𝗹𝗹 𝗱𝗲𝗿 𝗗𝗮𝘁𝗲𝗻𝘀𝗰𝗵𝘂𝘁𝘇𝗸𝗼𝗻𝗳𝗲𝗿𝗲𝗻𝘇: 𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁 𝟯𝟲𝟱 𝘁𝗿𝗼�...
www.linkedin.com
December 5, 2023 at 2:16 PM
🔥 Protokoll der #Datenschutz-konferenz: #Microsoft365 trotz Data Boundary und DPA vom Januar 2023 kritisch. - www.linkedin.com/posts/stefan.... #DSGVO #M365
I wanted to check the authenticity of the image using Copilot (Microsoft AI) and Gemini (Google AI). Both refused to upload the image.
The image is authentic: dpa, 24 January 2025
No image I have ever tested has been rejected so far.
Very surprising and worrying.
The image is authentic: dpa, 24 January 2025
No image I have ever tested has been rejected so far.
Very surprising and worrying.
May 17, 2026 at 5:24 PM
I wanted to check the authenticity of the image using Copilot (Microsoft AI) and Gemini (Google AI). Both refused to upload the image.
The image is authentic: dpa, 24 January 2025
No image I have ever tested has been rejected so far.
Very surprising and worrying.
The image is authentic: dpa, 24 January 2025
No image I have ever tested has been rejected so far.
Very surprising and worrying.
Meet Redakt: Practical GDPR Compliance for AI Teams
Redakt is an open-source PII anonymizer built on Microsoft Presidio. It sits between employees and AI tools, replacing personal data with placeholders before prompts leave your network. No data stored, no DPA needed, fully self-hosted.
Redakt is an open-source PII anonymizer built on Microsoft Presidio. It sits between employees and AI tools, replacing personal data with placeholders before prompts leave your network. No data stored, no DPA needed, fully self-hosted.
Meet Redakt: Practical GDPR Compliance for AI Teams
Redakt is an open-source PII anonymizer built on Microsoft Presidio. It sits between employees and AI tools, replacing personal data with placeholders before prompts leave your network. No data stored, no DPA needed, fully self-hosted.
pablooliva.de
March 30, 2026 at 5:21 AM
Meet Redakt: Practical GDPR Compliance for AI Teams
Redakt is an open-source PII anonymizer built on Microsoft Presidio. It sits between employees and AI tools, replacing personal data with placeholders before prompts leave your network. No data stored, no DPA needed, fully self-hosted.
Redakt is an open-source PII anonymizer built on Microsoft Presidio. It sits between employees and AI tools, replacing personal data with placeholders before prompts leave your network. No data stored, no DPA needed, fully self-hosted.
#Microsoft und #DPA: "Kunden können sich stets auf die jeweilige DPA-Version berufen, die bei Abschluss oder Verlängerung eines Abonnements für Onlinedienste gilt. Diese wird für die Dauer des Abonnements „eingefroren""
Microsoft Cloud Compendium, S. 7
www.rakoellner.de/wp-content/u...
Microsoft Cloud Compendium, S. 7
www.rakoellner.de/wp-content/u...
www.rakoellner.de
September 2, 2025 at 3:53 PM
#Microsoft und #DPA: "Kunden können sich stets auf die jeweilige DPA-Version berufen, die bei Abschluss oder Verlängerung eines Abonnements für Onlinedienste gilt. Diese wird für die Dauer des Abonnements „eingefroren""
Microsoft Cloud Compendium, S. 7
www.rakoellner.de/wp-content/u...
Microsoft Cloud Compendium, S. 7
www.rakoellner.de/wp-content/u...
🔥 #Microsoft hat ein neues DPA veröffentlicht: www.microsoft.com/licensing/do.... Wichtigste Änderung: Der neue Angemessenheitsbeschluss für die USA wurde aufgenommen. Ausführlich: www.linkedin.com/pulse/mehr-r.... Abgleich mit der Vorversion: draftable.com/compare/uJFP.... #DSGVO #Datenschutz #M365
November 15, 2023 at 9:01 PM
🔥 #Microsoft hat ein neues DPA veröffentlicht: www.microsoft.com/licensing/do.... Wichtigste Änderung: Der neue Angemessenheitsbeschluss für die USA wurde aufgenommen. Ausführlich: www.linkedin.com/pulse/mehr-r.... Abgleich mit der Vorversion: draftable.com/compare/uJFP.... #DSGVO #Datenschutz #M365
Microsoft tried to shift responsibility to their Irish subsidiary, but that didn't work either - with the DPA finding that minor changes made in Ireland are not enough to shift responsibility and - importantly - jurisdiction to Ireland.
October 10, 2025 at 6:06 PM
Microsoft tried to shift responsibility to their Irish subsidiary, but that didn't work either - with the DPA finding that minor changes made in Ireland are not enough to shift responsibility and - importantly - jurisdiction to Ireland.
The Belgian Court of Appeal has confirmed today finding of the Belgian DPA according to which the Transparency & Consent Framework”, which Google, Microsoft, Amazon, X, and entire tracking-based advertising industry rely on to obtain consentfor data processing is illegal
www.iccl.ie/digital-data...
www.iccl.ie/digital-data...
EU ruling: tracking-based advertising by Google, Microsoft, Amazon, X, across Europe has no legal basis
EU data protection authorities find that the consent popups that plagued Europeans for years are illegal. All data collected through them must be deleted. This decision impacts Google’s, Amazon’s and ...
www.iccl.ie
May 14, 2025 at 7:05 PM
The Belgian Court of Appeal has confirmed today finding of the Belgian DPA according to which the Transparency & Consent Framework”, which Google, Microsoft, Amazon, X, and entire tracking-based advertising industry rely on to obtain consentfor data processing is illegal
www.iccl.ie/digital-data...
www.iccl.ie/digital-data...
Neues Microsoft-DPA:
Regelungen zu KI-Subunternehmern
von Dr. Olaf Koglin
www.legalcheck.de/blog/dpa-mai...
Neues Microsoft DPA vom 22.05.2026
von RA Stefan Hessel
www.linkedin.com/feed/update/...
Microsoft Products and Services Data Protection Addendum (DPA)
www.microsoft.com/licensing/do...
Regelungen zu KI-Subunternehmern
von Dr. Olaf Koglin
www.legalcheck.de/blog/dpa-mai...
Neues Microsoft DPA vom 22.05.2026
von RA Stefan Hessel
www.linkedin.com/feed/update/...
Microsoft Products and Services Data Protection Addendum (DPA)
www.microsoft.com/licensing/do...
May 28, 2026 at 11:33 AM
Neues Microsoft-DPA:
Regelungen zu KI-Subunternehmern
von Dr. Olaf Koglin
www.legalcheck.de/blog/dpa-mai...
Neues Microsoft DPA vom 22.05.2026
von RA Stefan Hessel
www.linkedin.com/feed/update/...
Microsoft Products and Services Data Protection Addendum (DPA)
www.microsoft.com/licensing/do...
Regelungen zu KI-Subunternehmern
von Dr. Olaf Koglin
www.legalcheck.de/blog/dpa-mai...
Neues Microsoft DPA vom 22.05.2026
von RA Stefan Hessel
www.linkedin.com/feed/update/...
Microsoft Products and Services Data Protection Addendum (DPA)
www.microsoft.com/licensing/do...
And here is the report on #Microsoft Copilot by 🇳🇴Norwegian DPA & 🇳🇴 Norwegian University of Science and Technology #privacy #privacysky
www.datatilsynet.no/regelverk-og...
www.datatilsynet.no/regelverk-og...
November 28, 2024 at 7:11 AM
And here is the report on #Microsoft Copilot by 🇳🇴Norwegian DPA & 🇳🇴 Norwegian University of Science and Technology #privacy #privacysky
www.datatilsynet.no/regelverk-og...
www.datatilsynet.no/regelverk-og...
Microsoft Products and Services Data Protection Addendum (DPA)
01.09.2025
www.microsoft.com/licensing/do...
01.09.2025
www.microsoft.com/licensing/do...
September 1, 2025 at 2:09 PM
Microsoft Products and Services Data Protection Addendum (DPA)
01.09.2025
www.microsoft.com/licensing/do...
01.09.2025
www.microsoft.com/licensing/do...
Ein klares Signal für den Wirtschaftsstandort Deutschland und ein wichtiger Beitrag für den Strukturwandel in NRW. Rechenzentren sind die Herzkammer der Digitalbranche, gute Nachrichten für den KI-Standort von Microsoft. 💪
www.handelsblatt.com/dpa/kuenstli...
www.handelsblatt.com/dpa/kuenstli...
Handelsblatt
www.handelsblatt.com
February 17, 2024 at 3:27 PM
Ein klares Signal für den Wirtschaftsstandort Deutschland und ein wichtiger Beitrag für den Strukturwandel in NRW. Rechenzentren sind die Herzkammer der Digitalbranche, gute Nachrichten für den KI-Standort von Microsoft. 💪
www.handelsblatt.com/dpa/kuenstli...
www.handelsblatt.com/dpa/kuenstli...
"Update: Neues #Microsoft-#DPA erschienen"
Koglin:
-> DPA = Data Protection Addendum (≠ Data Protection Agreement oder AVV)
-> "Für den Datenschutz bei normalen "nicht-öffentlichen" Verantwortlichen gibt es keine wirklich relevanten Veränderungen"
legalcheck.de/blog/neues-m...
Koglin:
-> DPA = Data Protection Addendum (≠ Data Protection Agreement oder AVV)
-> "Für den Datenschutz bei normalen "nicht-öffentlichen" Verantwortlichen gibt es keine wirklich relevanten Veränderungen"
legalcheck.de/blog/neues-m...
Update: Neues Microsoft-DPA erschienen | LegalCheck
Am 1. September 2025 hat Microsoft wieder eine neue Version seines Data Protection Addendum herausgegeben. Wir geben einen Überblick über die Änderungen: Schutz gegen Deaktivierung (Internat. Strafger...
legalcheck.de
September 3, 2025 at 12:50 PM
"Update: Neues #Microsoft-#DPA erschienen"
Koglin:
-> DPA = Data Protection Addendum (≠ Data Protection Agreement oder AVV)
-> "Für den Datenschutz bei normalen "nicht-öffentlichen" Verantwortlichen gibt es keine wirklich relevanten Veränderungen"
legalcheck.de/blog/neues-m...
Koglin:
-> DPA = Data Protection Addendum (≠ Data Protection Agreement oder AVV)
-> "Für den Datenschutz bei normalen "nicht-öffentlichen" Verantwortlichen gibt es keine wirklich relevanten Veränderungen"
legalcheck.de/blog/neues-m...
FYI: Microsoft's DPA update cuts AI subprocessor notice to 30 days #Microsoft #DataProtection #AIEthics #VendorGovernance #Privacy
Microsoft's DPA update cuts AI subprocessor notice to 30 days
Microsoft updated its data protection addendum on May 22 to reduce AI subprocessor notice to 30 days, reshaping vendor governance for enterprise customers.
ppc.land
June 2, 2026 at 5:06 PM
FYI: Microsoft's DPA update cuts AI subprocessor notice to 30 days #Microsoft #DataProtection #AIEthics #VendorGovernance #Privacy
Hat eigentlich jemand schon mal das #DPA zwischen Niedersachsen und #Microsoft gesehen? Sind darin #Telemetriedaten ausgeschlossen? frage für mich selbst.. 🎄
December 18, 2024 at 10:09 AM
Hat eigentlich jemand schon mal das #DPA zwischen Niedersachsen und #Microsoft gesehen? Sind darin #Telemetriedaten ausgeschlossen? frage für mich selbst.. 🎄