Austria: Data Protection Authority investigation into Microsoft over alleged violation of GDPR in handling of children's data
Progress
Current status
in force
08 Oct 2025 in force
04 Jun 2024 under deliberation
Scope
Implementers
Austria
Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
software provider: other software
infrastructure provider: cloud computing, storage and databases
Government Branch
executive
Government Body
data protection authority
Implementation Level
national
Timeline of events
Austrian Data Protection Authority issued its ruling following investigation into Microsoft over alleged violation of GDPR in handling of children's data
On 8 October 2025, the Austrian Data Protection Authority ruled on a complaint regarding Microsoft’s handling of children's data under the General Data Protection Regulation (GDPR). The Authority found that the Federal High School and the Federal Mi…
SourceEvent type
investigation
Action type
ruling
Government branch
executive
Government body
data protection authority
Austrian Data Protection Authority opened investigation into Microsoft over alleged violation of GDPR in handling of children's data
On 4 June 2024, the Austrian Data Protection Authority opened an investigation into Microsoft over an alleged violation of the General Data Protection Regulation (GDPR) in the handling of children's data. The complainant, a minor student, filed a da…
SourceEvent type
investigation
Action type
announcement
Government branch
executive
Government body
data protection authority