EDPS audit of the Commission's MS365 use
28 July: EDPS closes its investigation into the European Commission’s use of Microsoft 365, now deeming it compliant after previously finding serious EUDPR violations, notably on purpose limitation and international transfers.
Jul 29, 2025
—
11 min read
You might also like
Adequacy decisions
members
–
2 min read
22 July: UK DUAA deemed adequate by the Commission ✅. Up next for the draft decisions: EDPB Opinion, Member States reps approval and EP "right of scrutiny".
🇮🇪 DPC fines TikTok €530m for China transfers
members
–
3 min read
10 July: DPC launches new investigation into China transfers. Earlier: transparency breach by failing to disclose the third countries involved and didn't explain the nature of the transfers in its privacy policy --> get compliant in six months or stop the transfers (but order paused until Oct).
CNIL shares transfer impact assessment (TIA) practical template
members
–
2 min read
NB: On 9 July, CNIL appears to have updated the webpage with that date, though there don’t seem to be any actual changes – and the PDFs are still from January. Either way, here’s a quick reminder! 💬 "CNIL TIA template is one of the best templates available to the public!"