According to the EDPS, the Commission has failed to provide appropriate safeguards to ensure personal data transferred outside the EU/EEA receives an equivalent level of protection.
Furthermore, in its contract with Microsoft, the Commission did not sufficiently specify what types of personal data are to be collected and for which explicit and specified purposes.
#european-commission #data-protection-regulations #microsoft-365 #european-data-protection-supervisor
[
add
]
[
|
|
...
]