Please notice: This article is more than 3 years old
Content, Source code or links may no longer be correct in the meantime.

What comes after a privacy violation? Of course further violations. I’ve update my list of violations and infringements because of this Heise Article “Anwenderüberwachung durch Microsofts Office-Software”:

Here is the full list (free to copy/use):

• The collection of user data in a Windows 10 based corporate network cannot be prevented by proportional resources.¹
• With 23,000 to 25,000 data points, a Microsoft Office package collects significantly more metrics than a Windows 10.²
• Collecting metrics also includes document content.³
• Using mobile devices with O365 or Azure Cloud offerings, Microsoft by Design gets direct access to the mailboxes of local Exchange server instances and stores data (emails, contacts, appointments) unencrypted on its own servers.⁴
• Dependence on Microsoft products, also known as lock-in⁵, blocks technological progress and increasingly represents a structural disadvantage.⁶
• Microsoft systematically undermines best practice recommendations and EU standards⁷ in procurement and competition law.⁸
• Microsoft does not manage to explain on what basis it claims its own interests, including the transfer of data to third parties, as a data processor on behalf of a client.⁹
• Microsoft collects users’ work-related habits and provides companies with a detailed, personalized “Productivity Score” for employee monitoring.¹⁰

This new addition of employee monitoring is just a recycled version of an existing feature Microsoft has been using internally for years. It is not very surprising that it has now become a product called “Workplace Analytics”. It is a well-known anti-pattern called “Function Creep”.¹¹

Since in the last few days the news has been circulating that Microsoft allegedly has reached an agreement with data protectionists, I show this legal 5-minute analysis by Max Schrems:¹²

Data protection is not a feature! It is an obligation and a matter of principle. The way Microsoft (and others!) emphasize privacy so much and even try to promote it is quite bizarre. It’s kind of like the way a chef emphasizes that he uses a clean spoon to stir (and not a finger).