CRBC News

Microsoft Faces EU Complaint Over Alleged Storage Of Palestinian Data Used In Israeli Military Surveillance

EU regulators are assessing a complaint from non-profit Eko claiming Microsoft stored Palestinians' personal data that was used for Israeli military surveillance. The Irish Data Protection Commission has confirmed receipt and is evaluating the case because Microsoft’s European HQ is in Ireland. The Guardian reported the Israeli Defence Forces used Azure to store phone-call files from Gaza and the West Bank; Microsoft restricted some Israeli military cloud access in September, while Eko cites whistleblower evidence of rapid data offloading.

Microsoft Faces EU Complaint Over Alleged Storage Of Palestinian Data Used In Israeli Military Surveillance

Microsoft Faces EU Complaint Over Alleged Storage Of Palestinian Data

Microsoft is the subject of a complaint filed with European Union regulators by Eko, a non-profit that says it defends "people and planet over profits." The complaint alleges Microsoft stored personal data on Palestinians that was later used to support surveillance activities by the Israeli military.

The Irish Data Protection Commission (DPC) confirmed it has received the complaint and said the case is "currently under assessment." Because Microsoft’s European headquarters are located in Ireland, the DPC acts as the EU's lead data protection regulator for the company.

Allegations And Timeline

Eko alleges Microsoft violated EU data protection rules by unlawfully processing personal data belonging to Palestinians and EU citizens, enabling "surveillance, targeting, and occupation by the Israeli military," according to the group's statement.

The complaint follows reporting by The Guardian which said the Israeli Defense Forces used Microsoft’s cloud platform, Azure, "for the storage of data files of phone calls obtained through broad or mass surveillance of civilians in Gaza and the West Bank." After reviewing that report, Microsoft restricted the Israeli military’s access to certain cloud services in September.

"Microsoft unlawfully processed personal data belonging to Palestinians and EU citizens, enabling surveillance, targeting, and occupation by the Israeli military," — Eko

Eko further says whistleblowers have provided "new evidence" indicating Microsoft rapidly offloaded large quantities of allegedly captured surveillance data after the Guardian investigation. Microsoft has disputed the characterization of its actions.

A Microsoft spokesperson told reporters: "Our customers own their data and the actions taken by this customer to transfer their data in August was their choice. These actions in no way impeded our investigation."

Jurisdiction And Legal Context

According to The Guardian, the data in question was stored on Microsoft servers in Ireland and the Netherlands — which would place the material under the European Union’s General Data Protection Regulation (GDPR). GDPR, which came into force in 2018, is intended to protect EU residents from misuse of personal data and reduce the risk of data breaches.

The DPC's assessment will determine whether EU data-protection rules were breached and whether any enforcement action is warranted. The case highlights tensions over cloud providers' responsibilities, customer data control, and the accountability of tech companies when data is used for surveillance.

Reporting credits: bur-ajb/bcp/jhb

Similar Articles