InfoSecBulletin Cybersecurity for mankind
Microsoft said on Thursday that it will keep all personal data of its cloud customers within the European Union instead of allowing transfers outside the EU. This is part of their ongoing efforts to comply with different privacy regulations in different places.
Microsoft will store customer data from its cloud services within the “EU data boundary” under the new policy. This includes Azure, Microsoft 365, Power Platform, and Dynamics 365.
US banks faced unauthorized access by AI agents in customer accounts: Axios reports
Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager
Hacker claim to access Rajasthan Police data: 70,000 records allegedly exposed
Update now! PHP2Shell: Critical PHP vulnerabilities patched
Trump says data centres should pay dividends to local community
Hackers Actively Exploiting Palo Alto VPN Flaw Via CVE-2026-0257
DeepSeek AI banned by U.S. Government; federal agencies must remove all related tools
CISA, NSA and NIST Publish New 10 AI Agent Control Guidelines
Claude AI Cracks 25-Year NSA Cryptography Number Mystery in Just 30 Minutes
Bypassing firewalls, AI Agents Accessed Indian ‘ Data Without Permission: CERT-In
This includes “pseudonymized personal data,” which is found in system-generated logs and has been altered so as not to be directly linked to an individual — “making Microsoft the first large-scale cloud provider to deliver this level of data residency to European customers,” the company said in a release.
Microsoft announced in December 2022 that it will start localizing data storage soon. The first phase was completed last year and focused on storing personal data within the EU, excluding system-generated logs.
Recently, Microsoft and other big tech companies are under scrutiny from regulators over data transfers from the European Union, which has strict privacy laws under the General Data Protection Regulation (GDPR). In May 2023, Meta was fined $1.3 billion by the Irish Data Protection Commission for transferring data to the United States, where there are concerns about limited protections and sensitive information possibly ending up in the hands of law enforcement.
In July 2023, the EU and U.S. agreed on a new “Data Privacy Framework” allowing data transfers with protections. However, Microsoft is pursuing its EU Boundary plan, and Amazon plans to launch a “European Sovereign Cloud” service to keep customers’ metadata within the bloc.
