Microsoft 365 Education is allegedly breaking GDPR rules for school children in EU

Microsoft should be more transparent on how it uses school children data

Reading time icon 3 min. read


Readers help support Windows Report. We may get a commission if you buy through our links. Tooltip Icon

Read our disclosure page to find out how can you help Windows Report sustain the editorial team Read more

Microsoft 365 Education is allegedly breaking GDPR rules in EU

The featured image was created using DALL-E and it’s not an actual photo

In a new development that is causing much discussion, Microsoft faces questions about its education software called Microsoft 365 Education. This particular software is extensively employed in many schools throughout the European Union.

There are claims emerging that this educational tool may be violating data rights of school children – an allegation brought forward by privacy advocacy group NOYB. A formal complaint has been made to the Austrian privacy authority, requesting for an examination of data handled in Microsoft’s educational suite. This makes the situation more serious, not only because it could be seen as a privacy intrusion but also because of how this impacts on transparency and responsibility requirements set by GDPR.

What is Microsoft accused of?

Next, break this a little. Microsoft, the big in tech world, is accused for not being clear on how it treats private data of hundreds and thousands European school kids by NOYB. This lack of clarity from the company infringes upon provisions set forth by GDPR. But it becomes even more fascinating: Microsoft looks like it’s putting the duty on schools, saying that they are who must guarantee data rights are followed. This action has confused many people, asking how schools can handle this obligation with their scarce means and knowledge accessibility.

The situation isn’t limited to this. NOYB’s investigations indicate that Microsoft’s software, which is used for educational purposes, not only keeps an eye on users’ data but also tracks it – including information about minors – for reasons beyond the classroom. This monitoring without obvious consent might be utilized in profiling activities and could possibly bring up important worries regarding the privacy and safety of children who use these learning tools.

Microsoft, for its part, says that their products follow GDPR and other privacy laws. They claim to safeguard the privacy of young users. But, the reaction from company has not calmed these concerns. This is why many are asking for a more detailed investigation into how tech giants such as Microsoft handle data belonging to vulnerable users, especially children.

This situation is not new. It recalls similar cases in the past when Microsoft’s management of data was questioned, such as a prominent instance where the European Commission needed to align its use of Microsoft 365 office programs with privacy rules. These ongoing topics emphasize a wider discussion about finding equilibrium between technological progress within education and safeguarding students’ privacy rights.

The result of this investigation might establish a pattern for managing data privacy problems in the education field.

More about the topics: Education software, EU, Microsoft 365