operation of the services and the improvement features that involve the detection of, and protection against, emerging and evolving threats to the user (such as malware or spam) where required by law, for law enforcement purposes – following a specific process outlined which begins, where possible with directing the agent to ETD. outlines its approach to deletion of customer data on termination of ETD’s use of Microsoft Office 365 personnel will not process Customer Data without customer authorisation and are obliged to maintain the confidentiality of any Customer Data. Microsoft says that these supplements simply set out the way that as a matter of policy and practice, Microsoft handles information relating to Office 365. Microsoft supports the contractual provisions with more simply expressed documents that are an accurate statement of the provisions in the contract. These are placed online in a place called the Trust Centre. Key documents for Office 365 include: Office 365 Privacy Statement How we use your data Your Privacy Matters: We respect your privacy All these documents reinforce the same statements of the Microsoft approach which is: it uses the user data to maintain and provide Office 365 it is Microsoft’s policy not to use user data for other purposes Microsoft 365 (as a business service) is designed and operated physically and logically separately from Microsoft’s consumer services (i.e. Hotmail, etc) Microsoft does not scan emails or documents for advertising purposes. It provides a table that sets out its use of Customer Data (which does not include operational information i.e. logs about the service) Table 3 - Microsoft Office 365 use of Customer Data Use of Office 365 Online Customer Data (excluding Content Customer data content) text, sound, software, image (Subset of customer data) files that user provides or are considered confidential, sent provided on user’s behalf encrypted, includes email body and attachments, SharePoint Online site content (not URL), file body, instant messaging body, voice conversation, CRM files containing info about user end customer interactions Service operation and trouble Yes Yes shooting Security, spam and malware Yes Yes
operation of the services and the improvement features that involve the detection of, and protection against, emerging and evolving threats to the user (such as malware or spam) where required by law, for law enforcement purposes – following a specific process outlined which begins, where possible with directing the agent to ETD. outlines its approach to deletion of customer data on termination of ETD’s use of Microsoft Office 365 personnel will not process Customer Data without customer authorisation and are obliged to maintain the confidentiality of any Customer Data. Microsoft says that these supplements simply set out the way that as a matter of policy and practice, Microsoft handles information relating to Office 365. Microsoft supports the contractual provisions with more simply expressed documents that are an accurate statement of the provisions in the contract. These are placed online in a place called the Trust Centre. Key documents for Office 365 include: Office 365 Privacy Statement How we use your data Your Privacy Matters: We respect your privacy All these documents reinforce the same statements of the Microsoft approach which is: it uses the user data to maintain and provide Office 365 it is Microsoft’s policy not to use user data for other purposes Microsoft 365 (as a business service) is designed and operated physically and logically separately from Microsoft’s consumer services (i.e. Hotmail, etc) Microsoft does not scan emails or documents for advertising purposes. It provides a table that sets out its use of Customer Data (which does not include operational information i.e. logs about the service) Table 3 - Microsoft Office 365 use of Customer Data Use of Office 365 Online Customer data Customer Data (excluding content) Content text, sound, software, image files that user provides or are provided on user’s behalf (Subset of customer data) considered confidential, sent encrypted, includes email body and attachments, SharePoint Online site content (not URL), file body, instant messaging body, voice conversation, CRM files containing info about user end customer interactions Service operation and trouble shooting Yes Yes Security, spam and malware Yes Yes
Google-and-Microsoft-Privacy-Impact-Assessment.docx