Windows 10 and the Data Protection Act

Soldato
Joined
1 Apr 2014
Posts
19,824
Location
Aberdeen
I've been reading about how leaky Windows 10 is with your information and am wondering if anyone has considered the legal implications, specifically with regards to the Data Protection Act?
 
I have turned all the data collection information off and is not using Edge. I think there is ways to navigate around the data collection if you really want to and thus I don't believe they will be done for it.

if they are irresponsible with your data that's another matter. but MS certainly can't be done for the way they collect information about you as the options are there for you to switch on or off
 
I think there is ways to navigate around the data collection if you really want to and thus I don't believe they will be done for it.
This is where I take issue with Windows 10. In order to find out what to disable, such as services, you need to research online for a guide that tells you where and how to disable the data collectors. In reality, I feel there should be a simple on/off switch which turns off all the data collection options for you.
 
They were done for breaching the DPA with IE?


There you go again trying to cause problems on here.

I clearly said "I doubt that as MS got a big fine last time over IE. The EU must be rubbing their hands"

In other words, I think they haven't bothered to look in to the law in the EU about DPA.

Mind you did any of you who installed windows 10 download the A10 45 page document that goes with win 10?

On mIRC they found that even with most things turned off. Win 10 had 6 connections calling home for what ever reason.
 
But but but the "I'm doing nothing wrong I have nothing to hide" mob...

deuse - do you have a link to the article/story/page/discussion about the callling home connections?

I cannot understand why some people can't allow a dose of scepticism about W10's motives against the backdrop of the new privacy policy and some of the settings enabled by default after a fresh install. Furthermore I struggle to trust an organisation who makes promises about deployment (i.e domain machines are unaffected by the automated upgrade) and then goes and stages 5gb of upgrade files on each machine. Small yes, but if they can't even get that right how am I supposed to trust them with other stuff.

Furthermore, the changes to the MS privacy policy run deeper than people give credit. As a business we are having to rewrite our own privacy policy as a software developer so our customers are fully aware of how our application's data could go walkies.

We should be questioning security at every step, whether it's our own or Microsoft's settings. At least until we fully understand what each process and communication is servicing.
 
Last edited:
The issues for businesses must surely be greater than even home users.

In the (admittedly at the moment unlikely) scenario of a rollout of Win10 machines on a company lan - short of blocking ms.com and all associated webservers at the firewall level it must be at least disconcerting that all business generated content - design docs, that expenses spreadsheet, whatever is being uploaded back to the microsoft mothership potentially placing company trade secrets in the public domain
 
There you go again trying to cause problems on here.

I clearly said "I doubt that as MS got a big fine last time over IE. The EU must be rubbing their hands"

In other words, I think they haven't bothered to look in to the law in the EU about DPA.

Mind you did any of you who installed windows 10 download the A10 45 page document that goes with win 10?

On mIRC they found that even with most things turned off. Win 10 had 6 connections calling home for what ever reason.

So... "No" then.
 
But but but the "I'm doing nothing wrong I have nothing to hide" mob...

deuse - do you have a link to the article/story/page/discussion about the callling home connections?

I cannot understand why some people can't allow a dose of scepticism about W10's motives against the backdrop of the new privacy policy and some of the settings enabled by default after a fresh install. Furthermore I struggle to trust an organisation who makes promises about deployment (i.e domain machines are unaffected by the automated upgrade) and then goes and stages 5gb of upgrade files on each machine. Small yes, but if they can't even get that right how am I supposed to trust them with other stuff.

Furthermore, the changes to the MS privacy policy run deeper than people give credit. As a business we are having to rewrite our own privacy policy as a software developer so our customers are fully aware of how our application's data could go walkies.

We should be questioning security at every step, whether it's our own or Microsoft's settings. At least until we fully understand what each process and communication is servicing.


No link sorry as we was on mIRC. But the guys did prove it. They all had a hardware firewall to see who's calling who.
 
In the (admittedly at the moment unlikely) scenario of a rollout of Win10 machines on a company lan - short of blocking ms.com and all associated webservers at the firewall level it must be at least disconcerting that all business generated content - design docs, that expenses spreadsheet, whatever is being uploaded back to the microsoft mothership potentially placing company trade secrets in the public domain

If you can't deploy Win 10 professional without it sending documents to externals servers, I will eat a large hat.

No admin worth his salt is going to push out a vanilla image with default settings in a corporate environment.
 
If you can't deploy Win 10 professional without it sending documents to externals servers, I will eat a large hat.

No admin worth his salt is going to push out a vanilla image with default settings in a corporate environment.

There's an image in another thread I think showing the Enterprise only "totally off" setting.

Plus if your corporate network is leaky enough to allow unsolicited traffic in and out that you don't know what it's doing then you have bigger problems than just Windows 10.

Thia thread is rather misguided from the get go. The DPA doesn't ban people from collecting data, it governs what they do with it once they have. Which means none of the options in Windows 10 about collecting your data or not are really anything to do with the DPA.

Where there is likely to be some potential contention is the situation where OneDrive starts to store cloud copies of your documents in different countries, which businesses will want to be aware of. But given the multiple levels of data redundancy already available in Azure and OneDrive for Business (single data centre, multiple data centres in the same region, global, or anywhere you like) the suggestion that Microsoft simply "haven't read the DPA" is rather absurd.

Microsoft are already safely storing corporate data in a way governments and major companies are perfectly happy with, so I think they are probably qualified enough to keep your holiday snaps safe too.
 
Thia thread is rather misguided from the get go. The DPA doesn't ban people from collecting data, it governs what they do with it once they have. Which means none of the options in Windows 10 about collecting your data or not are really anything to do with the DPA.

That's not correct. I was thinking not about Microsoft's responsibilities under the DPA but rather the installing organisation's.
 
I think that the major problem (for me) is that the options are mostly on by default. The users of this forum will, in most cases, be savvy enough to examine what they are doing and at least question what needs to be on or off. A huge number of others though will likely accept Express Settings without any idea what that means. I don't expect anything bad to come of that but I really don't like the idea of all that data being collected/made available to MS without most people even being aware....
 
They were done for breaching the DPA with IE?
No it wasn't, it was because, like apple do with safari, ie came preinstalled and the eu assumed that everyone was too stupid to think about installing other browsers. It has lapsed now anyway..
 
Back
Top Bottom