InfoSecBulletin Cybersecurity for mankind
Microsoft said on Thursday that it will keep all personal data of its cloud customers within the European Union instead of allowing transfers outside the EU. This is part of their ongoing efforts to comply with different privacy regulations in different places.
Microsoft will store customer data from its cloud services within the “EU data boundary” under the new policy. This includes Azure, Microsoft 365, Power Platform, and Dynamics 365.
Bangladesh bank published CBS guideline Version 2.0
Fortinet report
Attackers exploiting vulnerabilities 50% faster, just 4.76 days
TechCrunch report
Indian gov.t sites compromised to plant online betting ads
Damage Costs Predicted To Exceed $265 Billion By 2031
Ransomware expected to attack every 2 seconds by 2031
ALERT CISA WARNS
Black Basta ransomware breached over 500 orgs worldwide
Cyber Attack On Data Center Cooling Systems results disruption
Chrome Zero-Day Alert — Update Your Browser to Patch
Dell Discloses Data Breach: 49 million customers allegedly affected
BIG VULNERABILITIES IN NEXT-GEN BIG-IP
UK confirms Ministry of Defence payroll data exposed in data breach
This includes “pseudonymized personal data,” which is found in system-generated logs and has been altered so as not to be directly linked to an individual — “making Microsoft the first large-scale cloud provider to deliver this level of data residency to European customers,” the company said in a release.
Microsoft announced in December 2022 that it will start localizing data storage soon. The first phase was completed last year and focused on storing personal data within the EU, excluding system-generated logs.
Recently, Microsoft and other big tech companies are under scrutiny from regulators over data transfers from the European Union, which has strict privacy laws under the General Data Protection Regulation (GDPR). In May 2023, Meta was fined $1.3 billion by the Irish Data Protection Commission for transferring data to the United States, where there are concerns about limited protections and sensitive information possibly ending up in the hands of law enforcement.
In July 2023, the EU and U.S. agreed on a new “Data Privacy Framework” allowing data transfers with protections. However, Microsoft is pursuing its EU Boundary plan, and Amazon plans to launch a “European Sovereign Cloud” service to keep customers’ metadata within the bloc.
