In short, the EDPS issued two orders against the European Commission regarding the suspension of data flows with Microsoft 365 outside the EU/EEA, and imposed corrective measures for compliance.
Microsoft must ensure that personal data processed outside the EEA complies with necessary and proportionate measures, such as disclosure only when required by third-country laws equivalent to EEA.
#european-data-protection-supervisor #european-commission #microsoft-365 #data-transfer #data-protection-standards
[
add
]
[
|
|
...
]