As reported by DataGuidance, the Austrian Data Protection Authority (DSB) has determined that Microsoft unlawfully installed tracking cookies on the devices of underage students utilizing Microsoft 365 Education, without obtaining their consent. This action is deemed to be in violation of the law. The case was brought to light by the digital privacy advocacy group noyb, which has a history of lodging multiple complaints concerning Microsoft's data processing methodologies. The DSB has mandated that Microsoft must halt all tracking activities within a four-week timeframe and expunge the pertinent data. Both the schools affected and the Austrian Ministry of Education have indicated that they were completely unaware of the presence of these tracking cookies prior to noyb's complaint submission. In response, Microsoft has asserted that its products adhere to all requisite data protection standards and that it is presently in the process of scrutinizing the ruling.