noyb win: Microsoft 365 Education may not track school children

Data Subject Rights The Austrian Data Protection Authority ("DSB") issued a decision finding that Microsoft 365 Education illegally tracks students and uses student data for Microsoft's own purposes. The software giant also did not answer an access request related to Microsoft 365 Education, which is widely used in European schools. Instead, Microsoft tried to shift all responsibility to local schools. While the relevant schools also have to provide more detailed access data and additional privacy information according to the decision, it is now for Microsoft to finally answer how it uses user data for their own business purposes. Original Complaint from 2024Decision by the DSB (PDF)Three-way Responsibility Shifting. During the COVID pandemic many schools quickly shifted to the "cloud" and Big Tech was quick to provide "educational" products. However, Microsoft shifted all responsibility to comply with privacy laws onto schools and national authorities - that have little to no actual c