Microsoft is once again under scrutiny in the European Union. Austrian advocacy group Noyb has filed two complaints against Microsoft regarding the activities of its 365 Education software in schools and the privacy of children. The group is also responsible for past complaints against OpenAI, Meta, Spotify, and other tech giants.
EU claims Microsoft secretly collects children’s data
Noyb alleges that Microsoft 365 Education, according to Microsoft’s own documentation, analyzes user behavior, collects browser data, and installs cookies used for advertising without the school’s knowledge. The advocacy group also claims that it is unclear what Microsoft does with students’ data and that it may be secretly monitoring children.
Felix Mikolasch, a data protection lawyer at Noyb, explains: “Our analysis of the data flows is very worrying. Microsoft 365 Education appears to track users regardless of their age. This practice is likely to affect hundreds of thousands of students and pupils in the EU and EEA. Authorities should finally step in and effectively enforce the rights of minors.”
Noyb also claims that Microsoft places the responsibility for General Data Protection Regulation (GDPR) compliance on schools without providing them with any access to or insight into privacy policies or data collection.
Maartje de Graaf, another data protection lawyer at Noyb, stated: “Microsoft keeps all the important information about data processing in its software, but points to schools when it comes to exercising rights. There is no way for schools to comply with their obligations of transparency and information.”
The GDPR sets out strict rules for the protection of minors’ data and focuses on extra protection, transparency, and accountability for the individual. Violation of the GDPR can result in a fine of €20 million ($22 million) or four percent of a company’s previous year’s annual global turnover.tunesharemore_vert
