Huan Qiu Wang Zi Xun·2026-01-29 07:02Core Viewpoint - The Austrian data protection authority (DSB) ruled that Microsoft illegally implanted tracking cookies on devices used by underage students without consent, constituting a violation of data protection laws [1][2] Group 1: Legal Findings - The DSB has ordered Microsoft to cease tracking activities on the affected students within four weeks [1] - The ruling stems from a complaint filed by the digital privacy organization "noyb," which highlighted that Microsoft shifted data protection responsibilities to schools and failed to ensure students' rights to access their data [1] - This is not the first time Microsoft has lost a case regarding student tracking; a previous ruling in October 2022 also found Microsoft guilty of illegal tracking through its education platform [2] Group 2: Microsoft’s Response - A Microsoft spokesperson stated that Microsoft 365 Education complies with all necessary data protection standards and that educational institutions can continue to use it in accordance with GDPR [2] - Microsoft is currently reviewing the latest ruling and will decide on subsequent actions in due course [2] Group 3: Privacy Concerns - Felix Mikolasch, a lawyer from noyb, emphasized that tracking minors clearly violates privacy protection principles, suggesting that Microsoft does not genuinely prioritize privacy protection [2]