Microsoft 365 (aka Office 365) is not GDPR compliant according to German authorities

Impetus

https://techcrunch.com/2022/11/28/microsoft-365-faces-darkening-gdpr-compliance-clouds-after-german-report/

The breaches include the locations where data is stored, the amount and extent of telemetry data Microsoft is extracting from users and while they didn’t mention it, Microsoft is trying to force users in Europe to use multi-factor authentication which involves a datagrab by Microsoft of mobile phone data in my view.  The report goes on to look at the alleged data handover by MS to US government secret services.

Furthermore, there are bugs in Microsoft Outlook, which it appears MS has no intention of fixing.  Eg

https://www.darkreading.com/application-security/microsoft-365-message-encryption-can-leak-sensitive-info

GDPR sets a maximum fine of 4% of prior year revenues. Microsoft revenues in 2021 were USD 168 bn – 4% of which is USD 6.72 bn rounded. The USD is falling rapidly in value against the EUR at the moment – the EUR is up 8.05% against the USD over the past month.  Every day’s delay in imposing a fine on Microsoft is costing us money!

Report (DE) : https://datenschutzkonferenz-online.de/media/dskb/2022_24_11_festlegung_MS365_zusammenfassung.pdf

smuggler.ie

Thanks for bumping this up.

No surprise there, and i believe its not only MS

World seam to not know/didn't understood/quick to forget what Edward Snowden attempted to tell to them about 10 year ago

GDPR is just used toilet roll, attempt to cover up dirty arses.