Austria discovers that Microsoft "illegally tracked students": privacy protection group
The Austrian Data Protection Authority issued a decision stating that Microsoft illegally tracked students through its Microsoft 365 Education program and required the company to grant them full access to their personal data. This decision came after a complaint was filed by the Austrian privacy group Noyb (None of Your Business), which accused the company of violating European data protection laws designed to protect children.
The Noyb group stated that the Microsoft 365 Education program installs cookies that collect browsing data and are used for advertising purposes. They pointed out that these practices have affected millions of students and teachers across Europe, raising serious concerns about how the company handles personal information in educational institutions.
In its statement, Noyb clarified that the Austrian authority's decision concluded that Microsoft not only tracked users without their consent but also used student data collected for its own commercial gain. The decision states that Microsoft must grant affected users — including the minor student who filed the complaint through her father — full access to all their personal data collected through the program.
Noyb also criticized Microsoft for trying to evade responsibility, pointing out that it attempted to shift the blame to local schools or national educational authorities for these violations. Felix Mikulas, the group's data protection lawyer, stated that the case revealed a "lack of transparency" in Microsoft's educational program, making it difficult for schools to inform students, parents, and teachers about what happens to their data.
In contrast, Microsoft stated that it will review the decision before taking any further steps, confirming that the Microsoft 365 Education platform meets all data protection standards, including the EU's General Data Protection Regulation (GDPR). Noyb, founded by privacy activist Max Schrems, is one of the leading organizations that has successfully sued major tech companies for violations of privacy laws.