EDPS: the European Commission's use of MS365 is non-compliant
10 Dec: EC submits decision compliance report, but both sought annulment in July—more to come! After the EDPS' second investigation into the EC's use of Microsoft 365, they found (again) several serious EUDPR violations, notably related to purpose limitation and transfers, which are still ongoing.
Dec 11, 2024
—
10 min read
You might also like
EDPB Guidelines 2/2024 Article 48 (public consultation)
members
–
4 min read
New EDPB Guidelines are now open for public consultation (until 25 Jan) on Article 48, which covers official requests from third country public authorities for personal data transfers.
Your OSS for the EU-US DPF
public
–
4 min read
5 Nov: EDPB adopts first review report 9 Oct: EC publishes first review report, concluding the DPF 'functions effectively'. New review in 3 years. Older: Interesting read by C. Kuner on 'Strengthening the EU Legal Edifice for Data Transfers'.
Major news: 🇪🇺 EUC launched new SCCs public consultation
members
–
1 min read
At last, the moment we've been dreading and waiting for: the European Commission has taken a step towards new SCCs for transfers where the importer is in a third country and directly subject to the GDPR. Planned for Q2 2025.