At the start of 2026 Austria’s data protection authority (DSB) ordered Microsoft to stop deploying certain tracking cookies on a school‑issued device after finding the cookies were placed without a valid legal basis while a pupil used Microsoft 365 Education — a ruling that threads technical...