Microsoft faced two complaints from privacy advocacy group NOYB (None of Your Business) filed with the Austrian privacy watchdog regarding its online educational technology software, according to a report from Brussels on June 4. These grievances add to the ongoing scrutiny of the U.S. tech giant.
The popularity of online educational technology programs surged during the COVID-19 pandemic as schools transitioned to remote learning and students became reliant on digital tools. NOYB’s complaints are centered on Microsoft’s 365 Education suite, which includes widely used applications such as Word, Excel, Microsoft Teams, PowerPoint, and Outlook.

The first complaint from NOYB alleges that Microsoft shifts its responsibility as a data controller, as mandated by the General Data Protection Regulation (GDPR), to schools. The GDPR requires entities that handle personal data to ensure its protection and proper processing. NOYB argues that schools do not possess the necessary resources or capabilities to fulfill this role effectively.
“Under Microsoft’s current system imposed on schools, the responsibility to audit Microsoft or instruct them on handling pupils’ data falls on the schools, which is unrealistic,” said NOYB lawyer Maartje de Graaf in a statement. She further criticized this arrangement, arguing that it is an effort by Microsoft to shift the responsibility for children’s data away from themselves.
The second complaint targets the use of cookies in Microsoft’s 365 Education suite. Cookies are used by advertisers to track user behavior and preferences. NOYB’s analysis of data flows revealed concerns about the tracking practices within the software, indicating that it may track users irrespective of their age.
“Our analysis of the data flows is highly concerning. Microsoft 365 Education seems to track users regardless of their age, a practice that potentially impacts hundreds of thousands of pupils and students across the EU and EEA (European Economic Area),” stated NOYB lawyer Felix Mikolasch.
NOYB has called on the Austrian Data Protection Authority to investigate these complaints and impose fines on Microsoft if violations are confirmed.
The complaints highlight broader concerns about data privacy and the responsibilities of tech companies in protecting user data, especially that of minors. With the increasing reliance on digital education tools, ensuring compliance with GDPR and safeguarding personal data have become paramount issues.
The resolution of these complaints could set important precedents for how educational technology companies handle data privacy in the future. As digital learning continues to grow, the balance between technological innovation and data protection remains a critical area of focus for regulators, educators, and technology providers alike.
Overall, NOYB’s actions underscore the ongoing vigilance required to protect personal data in the digital age, particularly within educational environments where vulnerable populations such as children are involved. The outcome of this case could significantly impact Microsoft’s practices and potentially lead to stricter enforcement of data protection regulations in the education sector.
For more such news visit, tech-news.in