Microsoft 365 provides tools to help with GDPR compliance, including Compliance Manager, Compliance Score, and Azure Information Protection Scanner. Updates include the general availability of Compliance Manager, availability of Compliance Score for Office 365, and general availability of Azure Information Protection Scanner for Office 365. Message Encryption preview for Office 365 and data protection preview for Apple MacOS in Office 365 were also announced.

1. Microsoft 365
Updates
to help with GDPR

2. Microsoft 365 Updates
Blog:
Microsoft 365 provides an information protection strategy to help with the
GDPR
February 22, 2018

3. Compliance Manager
general availability
for Azure, Dynamics 365, and Office 365 Business and
Enterprise customers in public clouds
Compliance Manager is a dashboard that provides a
summary of your data protection and compliance
status. It helps to meet complex obligations - but it is
also a starting point for any regulatory discussion or
audit. Compliance dashboard can proof your set of
policies, tools and procedures that the company has
deployed to meet GDPR requirements.
Article: Announcing Compliance Manager general availability

4. Compliance Score
availability
for Office 365
Compliance Score – a Compliance Manager feature –
enables you to perform ongoing risk assessments on
Microsoft Cloud services with a risk-based score
reference, giving you visibility into your compliance
performance. It can support your audit efforts.
Article: Manage Your Compliance from One Place – Announcing Compliance
Manager

5. Azure Information
Protection Scanner
general availability
for Office 365
Azure Information Protection Scanner detects PII
(Personally Identifiable Information) across files on your
file or SharePoint servers and allows you to implement
policies to automatically discover, classify, label, and
protect documents in your repositories.
Article: Consistent labeling and protection policies coming to Office 365 and Azure
Information Protection
Tech Article: Scan file servers, network shares, and SharePoint
Tech Article: Deploying the Azure Information Protection scanner to automatically
classify and protect files
Video: Information protection capabilities in Microsoft 365

6. Message Encryption
preview
for Office 365
The encrypt-only policy applies encryption to the email.
It works just out-of-the-box. No need for any 3rd party
software. You can apply the option in Outlook or in the
Exchange admin center.
Article: Encrypt only rolling out starting today in Office 365 Message Encryption

7. February
22
Data Protection
for Apple MacOS
preview
for Office 365
We are now previewing the ability to label and protect
sensitive data in Office applications on Mac devices.
This gives Mac users same Azure Information
Protection benefits as on PC.
Article: Announcing New information protection capabilities across devices, apps,
on-premises and the cloud
Video: Information protection capabilities in Microsoft 365

8. Consistent Labeling
preview
for Microsoft 365
We are unifying the labeling process for sensitive data
for O365 and Azure Information Protection. The labels
created in one service will be automatically
synchronized across the other service. No need to
create labels in two different places!
Article: Consistent labeling and protection policies coming to Office 365 and Azure
Information Protection

9. GDPR Sensitive
Information Classification
coming soon
for Microsoft 365
Today, we detect and classify over 80 types of sensitive
information automatically. Soon, we will consolidate all
of them to a single template. We will add also new
personal data types for automatic detection - such as
addresses, telephone numbers, and medical
information.
Article: What the sensitive information types look for
Article: Create a custom sensitive information type

10. Microsoft 365
Embrace the GDPR with the most
complete, secure, and intelligent solution
for digital work.
Microsoft has brought together Office 365, Windows
10, and Enterprise Mobility + Security into a single,
always-up-to-date solution called Microsoft 365 –
relieving organizations from much of the cost and
complexity of multiple, fragmented systems that were
not necessarily designed to be compliant with current
standards.