CNIL accuses Microsoft of “serious breaches” with Windows 10 – Le Figaro

According to the independent authority, the US group engages in a collection “excessive” data with its operating system for computers and tablets.

the CNIL launched a call to order at Microsoft. The National Commission on Informatics and Liberties (CNIL) asked the US software giant to put its Windows operating system 10 in accordance with the Data Protection Act. CNIL “serves notice Microsoft Corporation to stop excessive data collection and monitoring navigation of users without their consent. She also asked him to provide satisfactory data privacy of users, “wrote the independent authority on its website. And gave him three months to come into line.

The case dates back to the release of Windows 10, there is just a year. Several articles had pointed a “potential excessive collection of personal data.” The president of the National Front, Marine Le Pen, had itself seized of this issue. In an open letter to the President of the CNIL, she denounced “widespread spying on French computers.” Concerned, the collection of personal information for advertising purposes, organized by Microsoft it

“ALSO READ:. Windows 10: should we be afraid to privacy

it was on this point that the CNIL has responded. The authority has observed that advertising ID is enabled by default when installing Windows 10. “It allows Windows applications and third-party applications to track user navigation and offer them targeted advertisements without that the consent of users has been collected, “wrote the CNIL. Microsoft settles on user terminals “advertising cookies, without having properly informed prior to, nor able to oppose it.”

Another complaint concerns the collection of diagnostic data and Windows use “excessive”. It allows Microsoft to “have knowledge of all apps downloaded and installed on the system by a user and the time spent on each of them.” The CNIL also regrets that it is possible to protect your computer by a four-digit code and does not limit the number of login attempts, “which does not ensure the security and confidentiality of user data”.

This notice is not a sanction, the CNIL recalled. Suites will be given if Microsoft does not comply with the law within three months. “It was decided to make this particular formal notice public because of the seriousness of the deficiencies and the number of people affected (more than ten million users of Windows 10 in the country),” nevertheless indicates authority .