
Finally, after multiple unanswered emails an update by the #EDPS on the use of #Microsoft 365 by the European Commission. Both Microsoft and the Commission made changes to become more compliant. The processing of data now has a defined purpose and transfer outside the EU (read: #CloudAct ) is reduced and shown to be limited. The details of the measures are not specified. https://www.edps.europa.eu/press-publications/press-news/press-releases/2025/european-commission-brings-use-microsoft-365-compliance-data-protection-rules-eu-institutions-and-bodies_en Also see the letter linked.