German state bans Office 365 in schools, citing privacy concerns
Schools in Hesse, Germany, will have to rely on non-cloud software.
Microsoft has found Office 365 banned from use in at least some German schools due to privacy concerns over the way its cloud service works.
Microsoft’s cloud services has run into a fresh roadblock in Germany, after the state of Hesse ruled it is illegal for its schools to use Office 365 citing “privacy concerns.”
The Hesse Commissioner for Data Protection and Freedom of Information (HBDI) ruled that using the popular cloud platform’s standard configuration exposes personal information about students and teachers “to potential access by US authorities.”
The issue is not specifically the storage of school documents on cloud services – that in itself is ok provided that proper steps are taken to comply with GDPR requirements, as HDMI says.
The use of cloud applications by schools is generally not a data protection problem. Many schools in Hesse are already using cloud solutions. Whether, for example, the learning platform or the electronic class book: Schools can use digital applications in compliance with data protection, as far as the security of the data processing and the participation of the pupils is guaranteed.
The problem, says the regulator, is that telemetry data is sent out of Germany to the US, and this can include personal data.
This information can include anything from regular software diagnostic data to user content from Office applications, such as email subject lines and sentences from documents where the company’s translation or spellchecker tools were used.
Collection of such information is a violation of GDPR laws that came into effect last May.
In principle, consent could allow this data to be sent, but children are not able to give their consent in law, so Office 365 cannot be used. In even worse news for Microsoft, the watchdog organization says that the same is true for Windows 10.
The situation poses a problem for schools because they are not currently allowed to switch to either Google Docs or Apple’s iWork suite either.
What is true for Microsoft is also true for the Google and Apple cloud solutions. The cloud solutions of these providers have so far not been transparent and comprehensibly described. Therefore, it is also true that for schools the privacy-compliant use [of these alternatives] is currently not possible.
With Office 365 banned, schools have been asked to use local versions only of Microsoft Office, rather than the cloud-based platform.
Get in touch to discuss options
My Learning Fusion is hosted in Frankfurt, and is fully GDPR compliant. We store your files in Germany and let you create and share Office 365 materials securely. Your school also benefits from a wide range of productivity, assessment and learning tools on any device and in any language.