Austria Bans Microsoft From Tracking Students Online

Students in Austria just got a powerful privacy protection that could change how tech companies treat children's data worldwide.

Austria's data protection authority ruled on January 21 that Microsoft must stop using tracking cookies in its widely used education software within four weeks. The decision came after privacy advocates discovered the tech giant was collecting personal data from students without proper consent.

Tracking cookies analyze how people use websites and apps, often for advertising purposes. In this case, they were quietly installed on students' devices as they used Microsoft's education tools. The Austrian authority found Microsoft had no legal basis to process this personal information from minors.

The European Center for Digital Rights, known as Noyb (short for "None of Your Business"), filed the original complaints in 2024 after noticing the tracking in schools. The organization specializes in holding tech companies accountable under Europe's strict data protection laws.

"Tracking minors clearly isn't privacy-friendly," said Felix Mikolasch, a data protection lawyer at Noyb. The group has launched hundreds of similar cases since 2018, when Europe's landmark privacy regulation took effect.

Microsoft says it's reviewing the decision and maintains that its education software meets all required data protection standards. Schools can continue using Microsoft 365 for Education while the company addresses the ruling.

The Ripple Effect

This victory extends far beyond Austria's borders. Europe's General Data Protection Regulation set a global standard for digital privacy, inspiring similar laws worldwide. When one country enforces these protections, it pressures tech companies to improve practices everywhere.

The ruling recognizes something important: children deserve special protection online. Students shouldn't have to trade their privacy for access to educational tools. As more schools move learning online, ensuring these platforms respect young people's data becomes critical.

Other European countries are watching closely. Austria already ruled last year that Microsoft "illegally" tracked students and must grant them access to their data. This latest decision adds teeth to that earlier finding.

Privacy advocates hope this case encourages schools to demand better from tech vendors and parents to ask questions about what data their children's educational apps collect. Every win like this makes it harder for companies to treat student privacy as optional.

The next generation of digital citizens is learning an important lesson: their personal information matters, and adults are working to protect it.