The EU data protection watchdog is reviewing the Microsoft 365 report

Back in MarchThe European Commission’s use of Microsoft 365 was found to be in breach of the bloc’s data protection laws. Since then, we haven’t heard much about this problem. But Monday was the deadline for EU officials to respond to the European Data Protection Supervisor’s (EDPS) order demanding that it stop any data breaches and amend its contracts with Microsoft.

On Tuesday, EDPS Wojciech Wiewiórowski confirmed that he had received the Commission’s report, which he said was reviewing whether the bloc had complied or not. “Given the amount of information and the complexity involved, this analysis should be well thought out and will be done in a timely manner,” added Wiewiórowski, implying that another long period of radio silence will follow.

The Commission and Microsoft are both opposing the EDPS proposal (cases T-262/24 and T-265/24), which also explains a few words of EDPS now. But 2025 seems to be a very important year in this regard.