Microsoft GDPR Data Processing Agreement (DPA)

Question

My organization is making preparations for the GDPR and it is our understanding that Microsoft (Office 365) is processing personal data on behalf of my organization. Where can I access the Microsoft's/Office 365 EU data processing agreement?

Thanks!

Answer 1

Hi Vitaliy,

According to this file,  please check if the Assess your GDPR compliance is what you want or not.

Microsoft’s Online Services are governed by the Online Services Terms.  The Online Services terms include Microsoft’s core privacy and security commitments, data processing terms, Model Clauses, and our GDPR Terms.  The GDPR Terms follow closely the requirements of GDPR Article 28 (and 30, 32-36, 44, etc).  We have written the GDPR Terms as promises from Microsoft to our customers in order to meet the requirement that processors make binding commitments to their controller customers.  The GDPR Terms are Attachment 4 in the Online Services Terms—at the end of the document.

If you have any further questions at this time, please feel free to contact me.

Regards,

Jerry

[Update by Jerry He MSFT, 4/11/2018, 10:49 PM UTC]

Answer 2

Jerry,

I would like to receive Microsoft's specific Data Processing Agreement (or Amendment), similar to Google’s: https://gsuite.google.com/terms/dpa_terms.html

Can you point me to a specific url?

Thank you!

Vitaliy

Answer 3

Hi Vitaliy,

We are committed to GDPR compliance across our cloud services when enforcement begins May 25, 2018.

Your data is secure through OneDrive for Business services and your data is your business. This policy is backed by our agreements and reaffirmed by the adoption by many Microsoft services of the world’s first international code of practice for cloud privacy, ISO/IEC 27018. Please check How we manage your data for more detailed information.

About Where your data is located, please select your geolocation and check the location of your data.

Thanks

Jerry

Answer 4

Hi Vitaliy,

I think the problem you are experiencing is quite different from the one originally asked in this thread. Since the original question has been solved. If you have any other questions please open a new thread. We'll continue to support in the new thread.

Thanks for your understanding.

Regards,

Jerry

Answer 5

Hello. Can you tell me if Hotmail is covered by the same GDPR Data Processing agreement?

Thank you.