Does Microsoft 365 violate data protection?

The German Data Protection Conference (DSK) has determined that the use of Microsoft 365 is in breach of data protection regulations. Elmar Eperiesi-Beck, Managing Director of eperi, comments on the statement: “I expressly welcome the fact that the Data Protection Conference (DSK) has determined that the use of the Microsoft 365 Cloud service is in breach of data protection regulations. The DSK has thus rightly confirmed its ruling from 2020, as Microsoft has only improved a few details in the past two years, but has not fulfilled the basic requirements of the GDPR (in accordance with Schrems II). In particular, the DSK complains that Microsoft does not state clearly enough which data can be used by the company “for its own purposes.”