European Union: European Data Protection Supervisor investigation into the legality of the European Commission's use of Microsoft 365
Progress
Scope
Timeline of events
European Data Protection Supervisor closed compliance review of order concerning the European Commission's use of Microsoft 365
On 11 July 2025, the European Data Protection Supervisor (EDPS) concluded its compliance review of the order concerning the European Commission's use of Microsoft 365. The EDPS identified three contractual, technical, and organisational changes that…
SourceAnnounced EDPS compliance review of order concerning the European Commission's use of Microsoft 365
On 10 December 2024, the European Data Protection Supervisor (EDPS) announced it would examine the European Commission's compliance with the order issued on 8 March 2024 requiring the Commission to align with EU data protection regulations, includin…
SourceIssued EC appeal to EDPS ruling regarding its investigation into the legality of the European Commission’s use of Microsoft 365
On 17 May 2024, the European Commission (EC) appealed the ruling of the European Data Protection Supervisor (EDPS) regarding its investigation into the legality of the European Commission's use of Microsoft 365. The EC demanded the court to annul th…
SourceIssued EDPS ruling regarding its investigation into the legality of the European Commission’s use of Microsoft 365
On 8 March 2024, the European Data Protection Supervisor (EDPS) issued its ruling regarding the investigation into the legality of the European Commission’s use of Microsoft 365. The EDPS opened an investigation in May 2021 as part of the EDPS's rol…
Source