Discipline, Enquêtes

The EDPS may decide to start an investigation when we have a strong suspicion of an infringement of data protection rules by an EUI.

The aim of the investigation is to check whether an infringement of the applicable data protection rules, in particular the EUDPR, has occurred and to establish its circumstances.

To find out more about the process of EDPS investigations, consult our Investigation Policy and Investigation Factsheet below.

The EDPS has an ongoing investigation into Commission’s use of Microsoft Office 365 (M365).
While the ongoing investigation by the EDPS concerns the Commission in its capacity as a controller for its use of M365, the future outcome of this investigation should nevertheless be instructive for other EU institutions (EUIs) procuring of Microsoft products and services under the same inter-institutional licensing agreement with Microsoft.

Avis du CEPD sur l'interprétation de l'article 3, paragraphe 13, du règlement dans le contexte des informations fournies aux personnes concernées en vertu de l'article 15, paragraphe 1, point d), et de l'article 16, paragraphe 1, point e), du règlement et des restrictions prévues à l'article 25 du règlement (Dossier 2021-0786)