BRUSSELS (Reuters) – Microsoft’s (MSFT.O) contracts with European Union establishments don’t totally shield data consistent with EU regulation, the European Data Protection Supervisor (EDPS) mentioned in preliminary findings printed on Monday.
FILE PHOTO: Visitors stand in entrance of a show display at Microsoft’s new Oxford Circus retailer forward of its opening in London, Britain July 9, 2019. REUTERS/Simon Dawson/File Photo
The EDPS, the EU’s data watchdog, opened an investigation in April to evaluate whether or not contracts between Microsoft and EU establishments such because the European Commission totally complied with the bloc’s data safety guidelines.
“Though the investigation is still ongoing, preliminary results reveal serious concerns over compliance of the relevant contractual terms with data protection rules and the role of Microsoft as a processor for EU institutions using its products and services,” the EDPS says in an announcement.
The EU launched new guidelines on data safety in 2018, referred to as GDPR, relevant to all firms working within the bloc and designed to offer people extra management over their private data and to create a extra degree enjoying subject for companies.
“We are committed to helping our customers comply with GDPR, Regulation 2018/1725 and other applicable laws,” a Microsoft spokesman mentioned.
“We are in discussions with our customers in the EU institutions and will soon announce contractual changes that will address concerns such as those raised by the EDPS.”
The EDPS has labored with the Dutch ministry of justice, which carried out danger assessments final June and located that public authorities in member states face comparable points
The two have since arrange a discussion board designed to arrange honest guidelines for public administrations.
The EDPS mentioned there’s “significant scope” for enchancment of contracts with highly effective software program builders and that contractual phrases and technical safeguards agreed between the Dutch ministry and Microsoft have been a constructive step forwards.
The EDPS mentioned such options must be prolonged to all private and non-private our bodies within the EU and in addition to people.
Reporting by Marine Strauss @StraussMarine; enhancing by Philip Blenkinsop