Regulatory Watch  /  Austria  /  Data protection authority action
Moderate impactData protection authority actionDecided

Austrian DSB orders Microsoft to stop tracking school children with cookies

The Austrian Data Protection Authority ruled that Microsoft illegally installed tracking cookies on a pupil's device without consent. The authority ordered Microsoft to cease the use of those cookies within four weeks. The decision follows earlier complaints by noyb regarding Microsoft 365 Education.

Why it matters: The ruling highlights enforcement of GDPR consent requirements for tracking minors in educational software.

Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.

Sources
noyb win: Microsoft ordered to stop tracking school children
noyb · primary source · Jan 27, 2026
noyb win: Microsoft ordered to stop tracking school children
noyb · Jan 27, 2026
Details
JurisdictionAustria
RegulatorAustrian Data Protection Authority (DSB)
LawGeneral Data Protection Regulation
StatusDecided
PublishedJanuary 27, 2026
Effectivenot stated
OrganisationsMicrosoft
Topicsconsent, tracking, targeted advertising, children, profiling
Datapersonal, browsing, behavioral