Office 365 ban in German schools 'temporarily' lifted

Schools will be forced to manually block diagnostic data from being sent to the US

A ban on the use of Office 365 products in German schools has been temporarily lifted following a series of talks between Microsoft and the Hessian Data Protection Commissioner, according to an updated statement released today.

The German state of Hesse imposed restrictions on the use of Microsoft software in July after ruling Office 365 exposed information on students and teachers to potential access from US officials, and was therefore in breach of the EU's General Data Protection Regulation.

The decision followed several years of debate around whether German public authorities should use such cloud software at all, given that a large chunk of data is funnelled back to the US.

Office 365 was largely tolerated so long as Microsoft continued to invest in a local German cloud service, removing the need to send data back to the US. However, last August the company decided to shutter this service, leading officials to eventually conclude last month that Office 365 use no longer complied with data laws.

Advertisement
Advertisement - Article continues below
Advertisement - Article continues below

Yet, in another twist, the Hessian Data Protection Commissioner, Professor Michael Ronellenfitsch has now decided to "provisionally tolerate" the use of Office 365 in German schools, provided a series of conditions are met.

"The legality of using Office 365 is not yet fully understood," said Ronellenfitsch, in a statement. "In my opinion dated 09.07.2019 I have drawn the conclusion and explained that according to the state of the checks, the use of Office 365 in Hessian schools can not be tolerated.

"Since then, there have been intensive discussions with Microsoft about the privacy compliance of Office 365's use in the school, which has led to a privacy-related assessment and has invalidated a significant proportion of the concerns."

The ruling allows schools that have already purchased version 1904 of Office 365 and its various apps to continue using the software "until further notice".

However, those schools are also required block the transmission of any kind of diagnostic data themselves, although Microsoft is required to provide support with this - that is until the data protection authorities are able to provide a more permanent solution.

The Hessian data authority has also promised to conduct an audit of the current arrangement over the next few months, and will deliver a more permanent data protection assessment for the school sector, the statement added.

Advertisement - Article continues below

The decision appears to be something of an attempt to limit any potential disruption an outright Office 365 ban might have. However, it's likely that the ban will return unless Microsoft comes up with a way of preventing diagnostic data from leaving the country.

Featured Resources

What you need to know about migrating to SAP S/4HANA

Factors to assess how and when to begin migration

Download now

Your enterprise cloud solutions guide

Infrastructure designed to meet your company's IT needs for next-generation cloud applications

Download now

Testing for compliance just became easier

How you can use technology to ensure compliance in your organisation

Download now

Best practices for implementing security awareness training

How to develop a security awareness programme that will actually change behaviour

Download now
Advertisement

Recommended

Visit/cloud/cloud-computing/354478/microsoft-has-an-edge-on-aws-according-to-it-executives
cloud computing

Microsoft has an edge on AWS, according to IT executives

8 Jan 2020
Visit/hardware/354336/the-it-pro-products-of-the-year-2019-all-the-years-best-hardware
Hardware

The IT Pro Products of the Year 2019: All the year’s best hardware

24 Dec 2019
Visit/laptops/34636/microsoft-surface-laptop-3-hands-on-review-powerfully-tempting
Laptops

Microsoft Surface Laptop 3 13in review: Almost the perfect laptop

6 Dec 2019
Visit/hardware/laptops/354275/microsoft-surface-laptop-3-15in-review-ryzen-falls
Laptops

Microsoft Surface Laptop 3 15in review: Ryzen falls

4 Dec 2019

Most Popular

Visit/policy-legislation/data-governance/354496/brexit-security-talks-under-threat-after-uk-accused-of
data governance

Brexit security talks under threat after UK accused of illegally copying Schengen data

10 Jan 2020
Visit/microsoft-windows/32066/what-to-do-if-youre-still-running-windows-7
Microsoft Windows

What to do if you're still running Windows 7

14 Jan 2020
Visit/hardware/laptops/354533/dell-xps-13-new-9300-hands-on-review-chasing-perfection
Laptops

Dell XPS 13 (New 9300) hands-on review: Chasing perfection

14 Jan 2020
Visit/operating-systems/25802/17-windows-10-problems-and-how-to-fix-them
operating systems

17 Windows 10 problems - and how to fix them

13 Jan 2020