Investigation into Microsoft Over Alleged Data Misuse by Israeli Defense Forces

The Irish Council for Civil Liberties (ICCL) has formally requested that Irish authorities investigate Microsoft for alleged unlawful data processing related to the Israeli Defense Forces (IDF). The complaint, submitted to the Data Protection Commission (DPC), claims that Microsoft’s cloud services facilitated war crimes and crimes against humanity by enabling the IDF to conduct military operations against Palestinians. The ICCL argues that Microsoft’s infrastructure has been used to store and analyze intercepted communications, which has reportedly contributed to targeted airstrikes.

The GuardianTimes of IsraelGoogle withdraws EU antitrust complaint against Microsoft as cloud probe expands

The allegations stem from leaked documents indicating that Unit 8200, the Israeli military's intelligence agency, began discussions with Microsoft in 2021 to transfer sensitive intelligence data to Microsoft’s cloud services. The ICCL contends that this data processing violates the European Union's General Data Protection Regulation (GDPR), which governs personal data usage. The DPC, which oversees data protection in the EU, has confirmed receipt of the complaint and is currently assessing it.

The GuardianTimes of IsraelGoogle drops cloud complaint against Microsoft

In light of the allegations, Microsoft has initiated an external inquiry into its relationship with Unit 8200. Following preliminary findings, the company restricted the IDF's access to certain cloud services in September 2025. A Microsoft spokesperson stated that the data ownership lies with the customers, asserting that the actions taken by the IDF to transfer data were their own decisions and did not hinder Microsoft's investigation.

The Guardian

Critics, including the ICCL and the organization Eko, argue that Microsoft’s actions have obscured evidence of illegal data processing. They assert that the removal of records from EU servers to Israel could hinder investigations into potential violations of data protection laws. Eko has claimed that whistleblower evidence suggests Microsoft rapidly offloaded large quantities of surveillance data after the Guardian's investigation into the matter.

Times of Israel

While the ICCL and Eko have raised serious concerns regarding Microsoft’s data practices, the company maintains that it is compliant with data protection regulations. The DPC's ongoing assessment will be crucial in determining the validity of the allegations and whether further action is warranted.

Times of Israel

The DPC's investigation into the complaint against Microsoft is expected to unfold in the coming months. This inquiry may have significant implications for how tech companies manage data in relation to military operations and human rights concerns, particularly in the context of the ongoing Israeli-Palestinian conflict.

The Guardian

• “When EU infrastructure is used to enable surveillance and targeting, the Irish Data Protection Commission must step in – and it must use its full powers to hold Microsoft to account.” — ICCL Representative

The Guardian

• “ In a statement, a Microsoft spokesperson said: “Our customers own their data and the actions taken by this customer to transfer their data in August was their choice.” — Microsoft Spokesperson

Times of Israel

• “new evidence shared by Microsoft whistleblowers indicates that the company rapidly offloaded vast quantities of illegally captured surveillance data after a Guardian investigation.” — Eko Representative

Times of Israel