On 8 March 2024, the EDPS adopted a decision following its investigation into the European Commission's use of Microsoft 365. In the decision, the EDPS focused on compliance with provisions of Regulation (EU) 2018/1725 related to purpose limitation and international transfers and unauthorised disclosures of personal data (see also press release).
The EDPS will consider hereinafter the main data protection issues concerning the processing of personal data at stake, having regard to the measures envisaged by the European Public Prosecutor's Office (EPPO) to address data protection risks.
Disclaimer: Please note that parts of this document were redacted to protect public security and the internal decision making process of the EPPO.
Opinion on the revision of the EU Regulations on service of documents and taking of evidence in civil or commercial matters
Letter of 19 December 2016 concerning the European Commission Authentication System (ECAS) at European Banking Authority (EBA) (Case 2016-1113)
Guidelines on the protection of personal data processed through web services provided by EU institutions