Following its investigation, the EDPS has found that the European Commission (Commission) has infringed several key data protection rules when using Microsoft 365. In its decision, the EDPS imposes corrective measures on the Commission. The EDPS has found that the Commission has infringed several .....
Following its investigation, the EDPS has found that the European Commission (Commission) has infringed several key data protection rules when using Microsoft 365. In its decision, the EDPS imposes corrective measures on the Commission.
The EDPS has found that the Commission has infringed several provisions of Regulation (EU) 2018/1725, the EU’s data protection law for EU institutions, bodies, offices and agencies (EUIs), including those on transfers of personal data outside the EU/European Economic Area (EEA).
Imagine, all the money they are throwing to microsoft put towards a few teams that develops actively on open source projects to support independent and open source infrastructure.
Man I wish Obsidian were open source. Or that someone would just fully knock them off. It's the only notetaking app I've ever used that didn't feel like it was constantly fighting with me. Joplin just doesn't do it for me, especially with those jex files rather than just storing stuff in plain text.
I've heard Logseq is comparable to Obsidian and it's open-source. It is the corporate kind of open-source, though, so no guarantees that it stays as such...
The incompetence in the IT world is staggering. In the 90's I complained about the direction SaaS would take us, and my peers just dismissed me as paranoid.
Seriously, how do these people not see the issues with out sourcing your data/software hosting?
It's especially frustrating since it takes more network bandwidth to outsource this stuff, which is more risky (in my opinion - according to how I measure risk) than keeping it in-house, and with that much bandwidth you could easily support all your remote users anyway.
(Of course I'm comparing simple network/cloud provider outage risks against the local data risks and management, it's not really as simple as I'm making it. I just prefer the "keep as much local as you can" is better than distributing data, since it's going to be local anyway, meaning you're never free of those risks).
Yeah, I mean, neither are corporations, especially when there is no oversight, no sanctions, and no real alternatives for regular workers.
Also not sharing data for profit or lending it for private sector AI training. And it's not like developed countries get their data stolen as regularly as corps do. And eg financial regulators are pretty strict on data security (CISO things) + a lot of new directives concerning data are just about to come in force.
There goes my week and prolly the whole year… I look forward the internal assessment at my job but chances are local authorities will follow on this and the implications are crazy.
At first read it puts the bars sooooo high on several principles that basically no existing IT intensive business will have a chance to survive similar audit.
The EU has made it very clear for a while now that European organizations cannot rely on American clouds or SaaS-providers. It's perfectly possible to go without - it just means a lot of IT-orgs who have relied on having a career "in Microsoft" need to update their skillset.
« Perfectly possible » but at what cost and with what compromises though ? Not specifically looking at Microsoft - the same would apply to similar products.
Also a lot of the blame is on the commission itself and the lack of controls over its data - which also has nothing to do with where it’s being processed.
Even if you do 100% in EU with open source software you can still fail many of the controls if you don’t track your data, have appropriate documentation to demonstrate it, did the required assessments… and those expectations are what bit them in the ass I think.
And likely it will bit a lot of other actors that aren’t putting much effort in the same.