Microsoft 365 GDPR-compliant: 1-day assessment

In Schrems II, the ECJ declared the Privacy Shield, which regulates the transfer of personal data between the EU and the USA in accordance with the GDPR, invalid without transitional periods. As a result, the use of cloud-based services such as Microsoft 365 may require corresponding measures. In order to ensure the legal compliance of Microsoft 365 Services Provectus Technologies developed a process that enables Microsoft 365 services to be used GDPR-compliant in cooperation with PRW Rechtsanwälte (laywers). In a three-stage process, the Microsoft 365 services used in the company are analysed, legally checked and adjusted according to the recommendations. Only if the settings in the Microsoft 365 environment are set correctly and critical services are deactivated can you prevent fines or claims for damages. The entire process of setting measures is documented and is available in the form of a detailed expert opinion and a fully comprehensive report.

1. ANALYSIS OF COMPANY'S MICROSOFT 365 ENVIRONMENT: Development of a detailed and professional audit matrix of the Microsoft 365 services used in the company.

2. LEGAL EVALUATION BY PRW RECHTSANWÄLTE: Based on the developed audit matrix, PRW Rechtsanwälte (Lawyers) carry out a legal evaluation of all Microsoft 365 services used. In addition, recommendations for protective measures.

3. IMPLEMENTATION OF THE RECOMMENDATIONS Provectus supports the implementation of the legal recommendations. Depending on the Microsoft 365 services, this can include various adaptations.