Disziplinarverfahren und interne Ermittlungen

The EDPS may decide to start an investigation when we have a strong suspicion of an infringement of data protection rules by an EUI.

The aim of the investigation is to check whether an infringement of the applicable data protection rules, in particular the EUDPR, has occurred and to establish its circumstances.

To find out more about the process of EDPS investigations, consult our Investigation Policy and Investigation Factsheet below.

The EDPS has an ongoing investigation into Commission’s use of Microsoft Office 365 (M365).
While the ongoing investigation by the EDPS concerns the Commission in its capacity as a controller for its use of M365, the future outcome of this investigation should nevertheless be instructive for other EU institutions (EUIs) procuring of Microsoft products and services under the same inter-institutional licensing agreement with Microsoft.

Stellungnahme des EDSB zur Auslegung von Artikel 3 Absatz 13 der Verordnung im Zusammenhang mit der Unterrichtung betroffener Personen gemäß Artikel 15 Absatz 1 Buchstabe d und Artikel 16 Absatz 1 Buchstabe e der Verordnung und den Einschränkungen gemäß Artikel 25 der Verordnung (Fall 2021-0786)