Skip to content

You are viewing the classic layout. Switch to the new layout

News·noyb - European Center for Digital RightsEN
Export

Microsoft violates children’s privacy – but blames your local school

Data Subject Rights In the wake of the pandemic, schools in the European Union have increasingly begun to implement digital services for online learning.

Full text

Data Subject Rights In the wake of the pandemic, schools in the European Union have increasingly begun to implement digital services for online learning. While these modernisation efforts are a welcome development, a small number of big tech companies immediately tried to dominate the space – often with the intention of getting children used to their systems and creating a new generation of future “loyal” customers. One of them is Microsoft, whose 365 Education services violate children’s data protection rights. When pupils wanted to exercise their GDPR rights, Microsoft said schools were the “controller” for their data. However, the schools have no control over the systems. First complaint against Microsoft (DE)First complaint against Microsoft (EN auto-translation)Second complaint against Microsoft (DE)Second complaint against Microsoft (EN auto-translation)Shifting responsibility between Big Tech and local schools. Software vendors like Microsoft have an enormous market power, allow

How it connects

C‑769/22 European Commission v Hungary C‑769/22 - European Commission v Hungary The background In 2021 Hungary adopted "Law LXXIX of 2021 adopting stricter measures against persons convicted of paedophilia and amending certain laws for the protection of… CJEU Jul 24, 2026 Criminal Data Personal Data Minors
HvJ EU 9 januari 2025, C‑394/23 (Mousse) Artikelen: 5(1)(c), 6(1), en 21 AVG Onderwerp : Beginsel van minimale gegevensverwerking Gek genoeg verwijst het HvJ EU zelf niet naar HvJ EU 1 augustus 2022, C‑184/20… HvJ EU 9 januari 2025, C‑394/23 (Mousse). ·CJEU Jan 9, 2025 IP Address Material scope (GDPR) Retention Period
53Cpr/1/2023 Nitra District Court: Teacher's dismissal for posting children's photos on Facebook A kindergarten teacher (hereinafter, the teacher) has been working for the Municipality of Malý Lapáš (hereinafter, the municipal school) since January 2016. On 4 July 2023, the… District Court of Nitra Feb 14, 2025 Minors Child Consent Personal Data
2025 EDPB comments on European Commission's Guidelines on Art. 28 DSA EDPB, EDPB comments on European Commission's Guidelines on Art. 28 DSA, 2025. Jun 25, 2025 Minors Privacy by Design Privacy by Design & Default
€20,000 AEPD fines El Español for publishing video of minor assailant without anonymization El León de El Español Publicaciones, S.A., the controller, operates the Spanish digital newspaper „El Español“. It published an article concerning an assault and embedded a video… Spain ·Art. 5, 25, 58 Sep 16, 2026 Minors Anonymization Privacy by Design & Default