If your organization has an Office 365 Enterprise subscription, find out what rules your organization has set up in eDiscovery, audit logs, as well as any internal policies your organization may have for administrative data retention and access.
Netherlands authorities last year cited eight undocumented privacy issues with ProPlus versions of Office 2016 and Office 365 that allowed Microsoft to collect Dutch-created user content from the apps that was stored on US servers and potentially exposed to US law enforcement.
On behalf of the Dutch Ministry of Justice and Security, Privacy Company has investigated the privacy risks related to the use of Microsoft Windows 10 Enterprise, Office 365 ProPlus and Office Online, as well as the mobile Office apps.
This time around, the Hessian commissioner for Data Protection and Freedom of Information (HBDI) isn't just saying that schools would prefer not to use Microsoft, he's stating that their use of Office 365 is outright illegal.
Pointing out that the use of cloud applications in itself is not the problem as long as pupils’ consent and the security of the data processing is guaranteed, HBDI’s Michael Ronellenfitsch raised concerns about whether schools can store personal data of children in the cloud.
Ronellenfitsch adds, "As soon as, in particular, the possible third-party access to the data in the cloud and the issue of telemetry data have been resolved in a comprehensible and data protection-compliant manner, Office 365 can be used as a cloud solution by schools."
A report in the Indian press cites a document from the Reserve Bank of India (RBI) which found that banks which have migrated to Microsoft Office 365 services have had their customers' data shared with the US in order to comply with US law.