--- title: Is Microsoft 365 safe to use for the education sector? description: Microsoft 365 is unsafe to use in education because confidential information can be freely requested by authorities. How can you send your files securely? image: https://www.smartlockr.io/hubfs/Blog-Post-SmartLockr-Education%20(2)%20(1).webp --- [![Smartlockr logo](https://www.smartlockr.io/hubfs/Smartlockr-logo.png) ](https://www.smartlockr.io/en?hsLang=en) - Product - [Product overview ](https://www.smartlockr.io/en/product?hsLang=en) - [Integrations ](https://www.smartlockr.io/en/integrations?hsLang=en) - Customers - [Case studies ](https://www.smartlockr.io/en/blog/tag/casestudy) - Team - [Management ](https://www.smartlockr.io/en/teams/management?hsLang=en) - [IT specialist ](https://www.smartlockr.io/en/teams/it-specialist?hsLang=en) - [CISO ](https://www.smartlockr.io/en/teams/ciso?hsLang=en) - [End user ](https://www.smartlockr.io/en/teams/end-user?hsLang=en) - Branches - [Healthcare ](https://www.smartlockr.io/en/branches/secure-email-healthcare?hsLang=en) - [Municipalities ](https://www.smartlockr.io/en/branches/secure-email-municipalities?hsLang=en) - [Finance ](https://www.smartlockr.io/en/branches/secure-email-financial-services?hsLang=en) - [Legal ](https://www.smartlockr.io/en/branches/secure-email-legal-industry?hsLang=en) - [Education ](https://www.smartlockr.io/en/branches/secure-email-education?hsLang=en) - [Recruitment ](https://www.smartlockr.io/en/branches/secure-email-recruiters?hsLang=en) - [Housing associations ](https://www.smartlockr.io/en/branches/secure-email-housing-associations?hsLang=en) - [Pricing ](https://www.smartlockr.io/en/pricing?hsLang=en) - Resources - [Blog ](https://www.smartlockr.io/en/blog) - [Guides ](https://www.smartlockr.io/en/resources?hsLang=en#guides) - [Webinars ](https://www.smartlockr.io/en/resources?hsLang=en#webinars) - [Videos ](https://www.smartlockr.io/en/resources?hsLang=en#videos) - [Partners ](https://www.smartlockr.io/en/partners?hsLang=en) - Company - [Contact ](https://www.smartlockr.io/en/contact?hsLang=en) - [Support ](https://support.smartlockr.io/hc/en-us?hsLang=en) - [Request more licenses ](https://www.smartlockr.io/en/request-more-licenses?hsLang=en) - [Who we are ](https://www.smartlockr.io/en/about-us?hsLang=en) - [Jobs ](https://www.smartlockr.io/en/careers?hsLang=en) [![Free Consultation](https://no-cache.hubspot.com/cta/default/6122972/846d7346-3e53-4811-b976-8a3dd0a3f9ee.png)](https://cta-redirect.hubspot.com/cta/redirect/6122972/846d7346-3e53-4811-b976-8a3dd0a3f9ee) # Is Microsoft 365 safe to use for the education sector? [ Smartlockr ](https://www.smartlockr.io/en/blog/author/smartlockr) Apr 8, 2022 --- ![Is Microsoft 365 safe to use for the education sector?](https://www.smartlockr.io/hubfs/Blog-Post-SmartLockr-Education%20(2)%20(1).webp) Is Office 365 actually safe to use in the education sector? The short answer is 'no'. The long answer is more complex than that: Microsoft simply doesn't provide enough protection when sending sensitive information. That appears to be the main conclusion by an [extensive DPIA report ](https://www.privacycompany.eu/blogpost-en/new-dpia-for-the-dutch-government-and-universities-on-microsoft-teams-onedrive-and-sharepoint-online)commissioned by the Dutch government.  So what's the issue with Microsoft? Let's dive into it!  ## Microsoft is stuck with the CLOUD Act The safety of confidential information certainly isn't a new discussion when it comes to using Microsoft products, that has been ongoing since the introduction of the [CLOUD Act](https://www.smartlockr.io/en/blog/this-type-of-encryption-is-your-hero-against-the-cloud-act?hsLang=en) in 2018.  So what's the issue with the CLOUD Act?  The CLOUD Act gives American authorities the right to demand users' confidential information if it's stored with an American provider. It won't matter whether this information is stored on an American server or an American one, as long as the company is of American make. We don't have to tell you that the CLOUD Act is in direct opposition to the GDPR.  Because Microsoft is an American company they must comply with the CLOUD Act. Are you using Office 365? And are you sending confidential information through email? Then you are likely in violation of the GDPR. (And your customer data likely isn't safe either, even if they are American citizens!) ## CLOUD Act makes European privacy tricky If you have any customers in the European sphere, you are probably well-aware that Europe takes privacy seriously. The GDPR is reflective of that: a way to ensure sensitive information remains private and safe. Anyone in violation of GDPR will be subject to [heavy fines](https://www.smartlockr.io/en/blog/three-years-of-gdpr-an-overview?hsLang=en), like that 746 million fine Amazon had to pay in 2021. Ouch.  Though Microsoft has agreed to tackling safety concerns, these cannot mitigate the biggest risk of all: sending out confidential information that hasn't been encrypted with your own encryption key. Using European servers simply aren't enough to protect confidential information, say European governments. The American CLOUD Act still puts them at risk that sensitive information can simply be snatched up by American authorities. No matter Microsoft's claims that they 'have never given out confidential data to authorities'. The encryption that Microsoft uses may simply be pointless because the encryption key can also be accessed by authorities.  ### So what about American privacy laws? While the CLOUD Act may not mean much to the American education sector, the privacy of its students remains ever important. Especially when we look at the last two years, education has only become *more* online, and the matter of sensitive information becomes more entwined with the tools that educators use. One of the most important pillars of the privacy of students is the Family Educational Rights and Privacy Act. ## The pinnacle of student privacy: the FERPA The era of snail mailed report cards is long past us and has made room for digitized records that are accessible at any time, but not for any person. That's where FERPA comes in: the Family Educational Rights and Privacy Act. FERPA ensures that written consent must be obtained from a parent or student (if they are over the age of eighteen) the student's records are being shared with any third parties. A student's records that fall under FERPA protection include: - Personal information like their Social Security Number - Personal characteristics like gender, race, ethnicity or religion - Enrollment records - Grades - Schedules FERPA is there to entire confidentiality of the student and make sure that no personally identifiable information is shared. Although Microsoft offers end-to-end encryption, Microsoft does not protect students when it comes to their biggest threat: careless mistakes by their teachers. Even though Microsoft offers end-to-end encryption, there is one factor that they cannot protect against: Human error. Educators and school administrators can still fall into the trap of a data breach by accidentally sending information to the wrong person and no amount of encryption is going to protect against that fallout.  ## How to securely email confidential information The only way to keep confidential information safe is by using external encryption keys. Encryption keys ensure that only you and yours have access to the data you're sending out and making sure it's for *your eyes only.* Our advice is to choose an email provider that can arrange this for you. Here's the list of benefits!  ## Make use of zero knowledge end-to-end encryption We've said it before and we'll say it again: no two encryptions are alike. You're only truly safe when you're using [zero knowledge end-to-end encryption](https://www.smartlockr.io/en/blog/lock-your-digital-front-door-with-zero-knowledge-encryption?hsLang=en). End-to-end encryption makes sure that your data is sent encrypted (encryption in transition) and also when it is stored (encryption at rest). Microsoft uses end-to-end encryption so you can be sure to email safely. Unfortunately, that's not enough to keep confidential information safe. Sure, it makes your emails unreadable until someone wants to have a look (whether that's a hacker or the authorities). Even if you use encryption keys, they can be retrieved if you store them in a US Cloud (like SharePoint). So what do you do then? Make use of zero knowledge end-to-end encryption of course! The keyword here is 'zero knowledge'. Because the *zero knowledge* of end-to-end encryption makes use of encryption keys that are stored separately from the Cloud. No one, no hackers or nosy authorities, will have access to your encryption keys.  Smartlockr therefore uses zero knowledge end-to-end encryption to ensure that only you have access to your data.  ## Make sure you can recall your emails Of course, no person is perfect and that makes we are all subject to making mistakes, like accidentally sending out [confidential information to the wrong person](https://www.smartlockr.io/en/blog/sent-email-to-wrong-recipient-what-now?hsLang=en).  So what then? Try to recall or block your email. The problem is that you can't always do that with Microsoft: You can only retrieve sent emails in Outlook when your recipient also uses Outlook. If they're using Gmail? Well then you're outta luck.  Smartlockr offers you the possibility to recall your email, even when that email has already been read. You can easily go to your sent messages where you can block the sender, the file or the entire email message.  ![Block-files-en (1)](https://www.smartlockr.io/hs-fs/hubfs/Block-files-en%20(1).webp?width=741&height=417&name=Block-files-en%20(1).webp) ## Use an upload portal One upload portal is not like the other: Did you know that Microsoft only allows you to send files of a maximum of 25MB? In comparison Smartlockr has a limit of 5TB! Not to even mention unsafe alternatives like WeTransfer, which also make use of storage servers in the United States by the way!  It's of course possible to send files with a safe email solution, but it's easy to get lost in the fray when sending multiple files to multiple contacts. Who, what should go where? And sometimes you want to ask your recipient to send a file securely, even when they're not using a secure email solution.  [The future is in a secure upload portal](https://www.smartlockr.io/en/blog/upload-portal-receive-files-securely-and-easily?hsLang=en). Now you can both send and receive files all in one place without losing oversight.  ## A user-friendly email solution is key Finally, make sure your email solution is user friendly. Teachers in education are busy enough as it is. If your chosen email solution requires ten steps before you can send an email, you run the risk of people working around the solution. That doesn't help anyone. So choose a solution that is easy to integrate, user friendly and takes as little time as possible for your users. Smartlockr therefore uses a toggle that you can easily tick on and off. Convenient right? ![EducationImageUserfriendly (1)](https://www.smartlockr.io/hs-fs/hubfs/EducationImageUserfriendly%20(1).webp?width=741&height=181&name=EducationImageUserfriendly%20(1).webp) **Want to know more on encryption and protecting yourself against the CLOUD Act?** Then we invite you to download our whitepaper "Is it safe to store data in a US-based Cloud provider?" to get to know everything on encryption, the CLOUD Act and how to keep your information secure. Download it below!  [![is it safe to store data in a us based cloud provider](https://no-cache.hubspot.com/cta/default/6122972/2f947aad-8b89-4454-8f92-7f6871e6996d.png)](https://cta-redirect.hubspot.com/cta/redirect/6122972/2f947aad-8b89-4454-8f92-7f6871e6996d) [data protection](https://www.smartlockr.io/en/blog/tag/data-protection) [Secure Emailing](https://www.smartlockr.io/en/blog/tag/secure-emailing) [Secure Sharing](https://www.smartlockr.io/en/blog/tag/secure-sharing) [Cloud Act](https://www.smartlockr.io/en/blog/tag/cloud-act) [![secure communication](https://www.smartlockr.io/hs-fs/hubfs/secure-communication-bp.png?width=336&name=secure-communication-bp.png)](https://www.smartlockr.eu/en/request-demo?hsLang=en)   ### Whitepapers - [Is it safe to store data in a US-based Cloud provider?](https://www.smartlockr.eu/en/whitepaper-is-it-safe-store-data-us-cloud-provider?hsLang=en) - [Good cop, bot cop: the truth about AI, ML and your privacy](https://www.smartlockr.eu/en/whitepaper-ai-ml-and-data-privacy?hsLang=en) - [The 8 things you can expect from a partnership with Smartlockr](https://www.smartlockr.eu/en/whitepaper-things-you-can-expect-from-partnetship-smartlockr?hsLang=en) - [How to choose the right secure email solution?](https://www.smartlockr.eu/en/how-to-choose-the-right-secure-email-solution-whitepaper?hsLang=en) - [Keep your organization free of data leaks](https://www.smartlockr.eu/en/keep-organization-free-of-data-leaks?hsLang=en) - [Smartlockr & Workspace 365: Prevent data breaches, work and communicate more securely](https://www.smartlockr.eu/en/safe-emailing-and-safe-workplace?hsLang=en) ### Popular Post [ Oops, I sent an important email to the wrong recipient. What now? ](https://www.smartlockr.io/en/blog/sent-email-to-wrong-recipient-what-now?hsLang=en) [ Is Microsoft 365 GDPR-compliant? Spoiler alert: no ](https://www.smartlockr.io/en/blog/is-microsoft-365-gdpr-compliant?hsLang=en) [ Recall sent emails to protect data: block emails, files and recipients ](https://www.smartlockr.io/en/blog/recall-sent-email?hsLang=en) [ Why Pentesting is a must for banks and financial services ](https://www.smartlockr.io/en/blog/why-pentesting-is-a-must-for-banks-and-financial-services?hsLang=en) [ Preventing misdirected emails with files and recipients confirmation ](https://www.smartlockr.io/en/blog/confirmation-on-files-and-recipients?hsLang=en) ## Similar posts ### [Feature Friday – requesting the right files with an upload request](https://www.smartlockr.io/en/blog/upload-request?hsLang=en) Do you want to securely receive files? Send an upload request and let the recipient send you the correct files (incl. Document types and sizes). Read... SmartLockr Apr 26, 2019 ### [[Checklist] How to use email to securely share private data](https://www.smartlockr.io/en/blog/checklist-how-to-use-email-to-securely-share-private-data?hsLang=en) Want to send an email with private data and unsure if you're following GDPR guidelines? With these 6 easy steps, you can see if you're doing it... GDPR Jan 2, 2023 [![Smartlockr logo](https://www.smartlockr.io/hubfs/smartlockr-logo2.png) ](https://www.smartlockr.io/nl/?hsLang=en) **Netherlands: **H.J.E Wenckebachweg 123 1096 AM, Amsterdam Kvk: 61781614 BTW-nr: NL854485685B01   ### Contact - Netherlands: +31 (0) 20 244 03 50 - Sweden: +46 81 211 29 68 ### Smartlockr - [Terms & Conditions](https://www.smartlockr.io/en/general-terms-and-conditions-smartlockr?hsLang=en) - [Privacy Statement](https://www.smartlockr.io/en/privacy-statement?hsLang=en) - [Smartlockr A-Z](https://www.smartlockr.io/en/smartlockr-a-z?hsLang=en) - [Status of our services](https://www.smartlockr.io/en/status-of-our-services?hsLang=en) ### Support - [Help Center](https://support.smartlockr.io/hc/en-us?hsLang=en) - [FAQ](https://support.smartlockr.io/hc/en-us/categories/5354862458012-FAQ-and-information?hsLang=en) - [Need help? Download TeamViewer](https://get.teamviewer.com/smartlockr) © 2026 Smartlockr All rights reserved ![BC Certified logo_ISO 27001-2022 RVA_ENG](https://www.smartlockr.io/hs-fs/hubfs/BC%20Certified%20logo_ISO%2027001-2022%20RVA_ENG.jpg?width=303&height=80&name=BC%20Certified%20logo_ISO%2027001-2022%20RVA_ENG.jpg) ![NEN 7510 certificate Smartlockr](https://www.smartlockr.io/hs-fs/hubfs/BC-Certified-logo_NEN7510-1-2017_RVA_ENG.png?width=320&height=85&name=BC-Certified-logo_NEN7510-1-2017_RVA_ENG.png) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Smartlockr", "url" : "https://www.smartlockr.io/en/blog/author/smartlockr" }, "dateModified" : "2023-07-04T14:43:39.417Z", "datePublished" : "2022-04-08T15:04:15.000Z", "headline" : "Is Microsoft 365 safe to use for the education sector?", "image" : [ "https://www.smartlockr.io/hubfs/Blog-Post-SmartLockr-Education%20(2)%20(1).webp" ], "mainEntityOfPage" : { "@id" : "https://www.smartlockr.io/en/blog/is-microsoft-365-safe-for-education", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://www.smartlockr.io/hubfs/SL-logo@3x.png" }, "name" : "Smartlockr" } } ``` ```json { "@context" : "http://schema.org", "@type" : "Organization", "address" : { "@type" : "PostalAddress", "addressCountry" : "", "addressLocality" : "Amsterdam", "addressRegion" : "Noord Holland", "postalCode" : "", "streetAddress" : "H.J.E. Wenckebachweg 123 " }, "alternateName" : "AttachingIT", "areaServed" : { "@type" : "GeoCircle", "geoMidpoint" : { "@type" : "GeoCoordinates", "latitude" : "52.336690", "longitude" : "4.929430" }, "geoRadius" : "150 km" }, "description" : "Secure email and file sharing for businesses that handle privacy sensitive data", "email" : "sales@smartlockr.eu", "image" : "https://www.smartlockr.io/hubfs/homepage-en.png", "logo" : "https://www.smartlockr.io/hubfs/Smartlockr-logo.png", "mainEntityOfPage" : { "@id" : "https://www.smartlockr.io/en/blog/is-microsoft-365-safe-for-education", "@type" : "WebPage", "description" : "Microsoft 365 is unsafe to use in education because confidential information can be freely requested by authorities. How can you send your files securely? " }, "name" : "Smartlockr", "sameAs" : [ "https://www.linkedin.com/company/smartlockr/", "https://www.youtube.com/@smartlockr9354", "https://www.instagram.com/smartlockr/" ], "telephone" : "+31 (0) 20 244 03 50", "url" : "https://www.smartlockr.io/" } ``` ```json { "@context" : "https://schema.org/", "@type" : "WebSite", "description" : "Secure email and file sharing for businesses that handle privacy sensitive data", "name" : "Smartlockr", "potentialAction" : { "@type" : "SearchAction", "query-input" : "required name=search_term_string", "target" : "https://www.smartlockr.io/hs-search-results{search_term_string}" }, "url" : "https://www.smartlockr.io/" } ```