Create an account


Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Microsoft - Introducing more privacy transparency for our commercial cloud customers

#1
Introducing more privacy transparency for our commercial cloud customers

<div style="margin: 5px 5% 10px 5%;"><img src="https://www.sickgaming.net/blog/wp-content/uploads/2019/11/introducing-more-privacy-transparency-for-our-commercial-cloud-customers.jpg" width="1024" height="576" title="" alt="" /></div><div><div><img src="https://www.sickgaming.net/blog/wp-content/uploads/2019/11/introducing-more-privacy-transparency-for-our-commercial-cloud-customers.jpg" class="ff-og-image-inserted"></div>
<p>At Microsoft, we listen to our customers and strive to address their questions and feedback, because one of our foundational principles is to help our customers succeed. Today&nbsp;Microsoft is announcing an update to the privacy provisions in the Microsoft Online Services Terms (OST) in our commercial cloud contracts that stems from additional feedback we’ve heard from our customers.</p>
<p>Our&nbsp;updated OST&nbsp;will reflect contractual changes we have developed with&nbsp;one of our public sector customers, the Dutch Ministry of Justice and Security (Dutch&nbsp;MoJ).&nbsp;The changes we are making will provide more transparency for our customers over data processing in the Microsoft cloud.</p>
<p>Microsoft is currently&nbsp;the only&nbsp;major&nbsp;cloud provider to offer&nbsp;such&nbsp;terms in the European Economic Area (EEA) and beyond.</p>
<p>We are also announcing that we will offer the new contractual terms to all our commercial customers – public sector and private sector, large enterprises and small and medium businesses – globally. At Microsoft we consider privacy a fundamental right, and we believe stronger privacy protections through greater transparency and accountability should benefit our customers everywhere.</p>
<p><strong>Clarifying&nbsp;Microsoft’s&nbsp;</strong><strong>responsibilities&nbsp;for cloud&nbsp;services&nbsp;under the OST update</strong></p>
<p>In anticipation of the General Data Protection Regulation (GDPR), Microsoft designed&nbsp;most of&nbsp;its&nbsp;enterprise services as&nbsp;services where we are a data&nbsp;processor for our customers, taking the necessary steps to comply with the new data protection laws in Europe. At a basic level, this means Microsoft collects and uses personal data from its enterprise services to provide the online services requested by our customers and for the purposes instructed by our customers. As a processor, Microsoft ensures the integrity and safety of customer data, but that data itself is owned, managed and controlled by the customer.</p>
<p>Through the OST update we are announcing today we will increase our data protection responsibilities for a subset of processing that Microsoft engages in when we provide&nbsp;enterprise services.&nbsp;In the OST update, we will clarify that Microsoft assumes the role of data controller&nbsp;when we process data for specified administrative&nbsp;and operational&nbsp;purposes incident to providing the cloud services covered by this contractual framework, such as Azure, Office 365, Dynamics and Intune. This subset of data processing serves administrative&nbsp;or operational&nbsp;purposes&nbsp;such as account management; financial reporting; combatting cyberattacks on any Microsoft product or service; and complying with our legal obligations.</p>
<p>The change to assert Microsoft as the controller for this specific set of data&nbsp;uses&nbsp;will serve our customers by providing further clarity about how&nbsp;we use&nbsp;data, and about our commitment to be accountable under GDPR to ensure that the data is handled in a compliant way.</p>
<p>Meanwhile, Microsoft will remain the&nbsp;data&nbsp;processor&nbsp;for providing&nbsp;the service<span>s</span>, improving and addressing bugs or other issues related to the service, ensuring&nbsp;security of the services, and keeping the services up to date.</p>
<p>As noted above, the updated OST reflects the contractual changes we developed with the Dutch MOJ.&nbsp; The only substantive differences in the updated terms relate to customer-specific changes requested by the Dutch MOJ, which had to be adapted for the broader global customer base.</p>
<p>The work to provide our updated OST has already begun. We anticipate being able to offer the new&nbsp;contract provisions to all public sector and enterprise customers globally at the beginning of 2020.</p>
<p><strong>Working with our customers to strengthen privacy<br /></strong></p>
<p>Before and after GDPR became law in the EU, Microsoft&nbsp;has taken steps to&nbsp;ensure that we protect the privacy of all who use our products and services. We continue to work on behalf of customers to remain aligned with the evolving legal interpretations of GDPR. &nbsp;For example, customer feedback from the Dutch MoJ and others has led to the global roll out of&nbsp;a number of <a href="https://blogs.microsoft.com/on-the-issues/2019/04/30/increasing-transparency-and-customer-control-over-data/">new privacy tools</a>&nbsp;across our major services,&nbsp;specific changes to&nbsp;<a href="https://www.microsoft.com/en-us/microsoft-365/blog/2019/05/01/microsoft-office-new-privacy-controls/">Office 365 ProPlus</a> as well as <a href="https://support.office.com/en-us/article/using-the-diagnostic-data-viewer-with-office-cf761ce9-d805-4c60-a339-4e07f3182855?ui=en-US&amp;rs=en-US&amp;ad=US">increased transparency</a> regarding use of diagnostic data.</p>
<p>We <a href="https://blogs.microsoft.com/eupolicy/2019/07/02/how-microsoft-works-with-customers-to-keep-their-trust-a-story-from-the-netherlands/">remain committed</a> to listening closely to our customers’ needs and concerns regarding privacy. Whenever customer questions arise, we stand ready to focus our engineering, legal and business resources on implementing measures that our customers require. At Microsoft, this is part of our mission to empower every individual and organization on the planet to achieve more.</p>
<p class="tag-list">Tags: <a aria-label="See more stories about GDPR" href="https://blogs.microsoft.com/eupolicy/tag/gdpr/" rel="tag">GDPR</a>, <a aria-label="See more stories about OST" href="https://blogs.microsoft.com/eupolicy/tag/ost/" rel="tag">OST</a>, <a aria-label="See more stories about privacy" href="https://blogs.microsoft.com/eupolicy/tag/privacy/" rel="tag">privacy</a></p>
</div>


https://www.sickgaming.net/blog/2019/11/...customers/
Reply



Forum Jump:


Users browsing this thread:
1 Guest(s)

Forum software by © MyBB Theme © iAndrew 2016