Dutch Report Slams Microsoft over Potential GDPR violations

[Tony Redmond]

Two posts on this topic:

A report prepared for the Dutch Government slams Microsoft for GDPR personal data violations discovered in Office 2016 and Office 365. The best intentions lie behind the amount of telemetry sent back to Microsoft for user actions and the audit data gathered by Office 365, but GDPR makes it clear that personal data must be protected, and Microsoft might be failing.

https://www.petri.com/dutch-report-slams-microsoft-gdpr-violations

Following a Dutch report saying that Office 365 might violate GDPR, some thoughts about how to restrict some of the flows of information from an Office 365 tenant to Microsoft.

https://office365itpros.com/2018/11/14/restricting-audit-data/

[#2]

A ZDnet article refers to actions already taken by Microsoft in releasing a "zero exhaust" Office telemetry setting. Any idea what this refers to?

https://www.zdnet.com/article/dutch-government-report-says-microsoft-office-telemetry-collection-bre...

[#3]

I believe that the report refers to the zero exhaust mode for Windows 10. AFAIK, no such equivalent setting exists for Office or for the Office 365 online apps, both of which are heavily criticized in the report.