cross-posted from: https://lemmy.ml/post/13035348

Following its investigation, the EDPS has found that the European Commission (Commission) has infringed several key data protection rules when using Microsoft 365. In its decision, the EDPS imposes corrective measures on the Commission.

The EDPS has found that the Commission has infringed several provisions of Regulation (EU) 2018/1725, the EU’s data protection law for EU institutions, bodies, offices and agencies (EUIs), including those on transfers of personal data outside the EU/European Economic Area (EEA).

    • BearOfaTime@lemm.ee
      link
      fedilink
      arrow-up
      25
      ·
      edit-2
      8 months ago

      Right?

      The incompetence in the IT world is staggering. In the 90’s I complained about the direction SaaS would take us, and my peers just dismissed me as paranoid.

      Seriously, how do these people not see the issues with out sourcing your data/software hosting?

      It’s especially frustrating since it takes more network bandwidth to outsource this stuff, which is more risky (in my opinion - according to how I measure risk) than keeping it in-house, and with that much bandwidth you could easily support all your remote users anyway.

      (Of course I’m comparing simple network/cloud provider outage risks against the local data risks and management, it’s not really as simple as I’m making it. I just prefer the “keep as much local as you can” is better than distributing data, since it’s going to be local anyway, meaning you’re never free of those risks).