EDPS: the European Commission's use of MS365 is non-compliant
[15 July: Both parties seek annulment] After the EDPS' second investigation into the European Commission's use of Microsoft 365, they found (again) several serious EUDPR violations, notably related to purpose limitation and transfers, which are still ongoing.
Jul 15, 2024
—
10 min read
You might also like
Your OSS for the EU-US DPF
public
–
4 min read
5 Nov: EDPB adopts first review report 9 Oct: EC publishes first review report, concluding the DPF 'functions effectively'. New review in 3 years. Older: Interesting read by C. Kuner on 'Strengthening the EU Legal Edifice for Data Transfers'.
Major news: 🇪🇺 EUC launched new SCCs public consultation
members
–
1 min read
At last, the moment we've been dreading and waiting for: the European Commission has taken a step towards new SCCs for transfers where the importer is in a third country and directly subject to the GDPR. Planned for Q2 2025.
Denmark Google Workspace for Education Chromebook case (Helsingørgate)
members
–
9 min read
[15 July: Municipalities complies with Jan order + 🚨 DPA asks for EDPB opinion on the scope of a controller's documentation obligations regarding a processor's use of sub-processors] The Danish DPA's landmark decision of 2022 to ban certain use of Google products and US transfers, is still ongoing.