Following its investigation, the EDPS has found that the European Commission (Commission) has infringed several key data protection rules when using Microsoft 365. In its decision, the EDPS imposes corrective measures on the Commission. The EDPS has found that the Commission has infringed several ...

cross-posted from: https://lemmy.ml/post/13035348

Following its investigation, the EDPS has found that the European Commission (Commission) has infringed several key data protection rules when using Microsoft 365. In its decision, the EDPS imposes corrective measures on the Commission.

The EDPS has found that the Commission has infringed several provisions of Regulation (EU) 2018/1725, the EU’s data protection law for EU institutions, bodies, offices and agencies (EUIs), including those on transfers of personal data outside the EU/European Economic Area (EEA).

  • ShortN0te@lemmy.ml
    33·
    9 months ago

    Imagine, all the money they are throwing to microsoft put towards a few teams that develops actively on open source projects to support independent and open source infrastructure.

  • Evil_Shrubbery@lemm.ee
    8·
    9 months ago

    Ohhh, interesting. And nice.

    It will be a confusing few years but transition away from big corp cloud services is an important thing.

    I really hope they eventually push self-hosting onto regulated entities as well.

      • Evil_Shrubbery@lemm.ee
        6·
        9 months ago

        Yeah, I mean, neither are corporations, especially when there is no oversight, no sanctions, and no real alternatives for regular workers.

        Also not sharing data for profit or lending it for private sector AI training. And it’s not like developed countries get their data stolen as regularly as corps do. And eg financial regulators are pretty strict on data security (CISO things) + a lot of new directives concerning data are just about to come in force.

  • a4ng3l@lemmy.world
    33·
    9 months ago

    There goes my week and prolly the whole year… I look forward the internal assessment at my job but chances are local authorities will follow on this and the implications are crazy. At first read it puts the bars sooooo high on several principles that basically no existing IT intensive business will have a chance to survive similar audit.