Published: March 12th, 2024,
Last updated: May 28th, 2025

The European Data Protection Supervisor (EDPS) has presented the EU Commission with a difficult choice: Either it manages to operate Microsoft’s Office 365 cloud office software in compliance with data protection law. Or it must cease all data transfers to Microsoft and service providers outside the scope of the General Data Protection Regulation or adequacy decisions by Dec. 9, 2024. It must also bring its own use into line with the General Data Protection Regulation. Otherwise, it must stop using Office 365.