Austria’s data protection authority ruled that Microsoft broke EU privacy laws by tracking students through its 365 Education platform and withholding details on how it used their data. Privacy group noyb filed the complaint after Microsoft redirected GDPR access requests to schools. Regulators ordered the company to explain its data practices, define vague terms, and reveal any transfers to third parties.
