EDPS audit of the Commission's MS365 use
28 July: EDPS closes its investigation into the European Commission’s use of Microsoft 365, now deeming it compliant after previously finding serious EUDPR violations, notably on purpose limitation and international transfers.
Jul 29, 2025
—
11 min read
You might also like
New SCCs on public consultation (delayed again)
members
–
1 min read
Announced in Sep 2024, delayed to Q2 2025, then to Q3, then to Q1 2026, and now to Q1 2027... Two public consultations for new SCCs: 1) For transfers to third country controllers/processors directly subject to the GDPR, and 2) for EU institutions' transfers to non-EU countries under the EUDPR
Denmark Google Workspace for Education Chromebook case (Helsingørgate)
members
–
12 min read
🇩🇰 DPA concludes the case, applies the dreaded EDPB Opinion and signal enforcement change – and shares takeaways in webinar. Must-read if you're in Denmark but crucial to everyone using third-country processors, especially US ones.
Adequacy decisions
members
–
4 min read
On 26 Jan, 🇪🇺🇧🇷 COM & Brazil adopted mutual adequacy decisions, allowing businesses, public authorities and researchers to freely exchange data.