Germany's federal and state data protection authorities (DSK) have raised concerns about the compatibility of Microsoft 365 with data protection laws in Germany and the wider European Union.
Under the GDPR, children below the age of 13 are incapable of consenting to their data being collected, while consent may be given by those with parental responsibility for those under 16 but not younger than 13. When platforms do store data on adults, those customers are meant to be able to request the deletion of their records.
Microsoft has denied that its assessment : "We ensure that our M365 products not only meet, but often exceed, the strict EU data protection laws. Our customers in Germany and throughout the EU can continue to use M365 products without hesitation and in a legally secure manner."
That statement is not actually a categorical and clear denial of what Germany alleges. But actually my opinion is, if there is concern about any age group using this software for educational purposes, all the concepts (and use) can also be taught using open source LibreOffice and then there is no issue like this. Schools should anyway be teaching concepts and principles, that there are options out there, and to innovate around experimentation, adapting software, etc.
See Microsoft 365 faces more GDPR headwinds in Germany
Redmond disputes report that 'it is not possible to use without transferring personal data to the USA'