Documentation, Contract Clause Change, Emails FSS Received in the Past two Years Identifying Countries that Microsoft can or actually process FSS Data

Your request was about the following information:

Please supply me with any information, documentation, contract clause change or emails, etc. that you have received in the past two years which identify any countries where Microsoft can or actually do process any data you have uploaded to the following services:

Q1. Any service operated by or on the Microsoft Azure cloud platform by any of your processors or contracted service providers (including a direct contract with Microsoft)

Q2. Any Microsoft M365 service

For the purposes of this request you should consider any offshored administration or direct system support as being ‘processing’, whether this relates to personal data or not - this is not a GDPR specific request.

All Food Standards Scotland (FSS) IT practices align with Scottish Government (SG) IT Security Policies.

The Food Standards Scotland (FSS) response to your FOI enquiry is covered by Case no 202500458892 which was communicated to you directly by SG.