French data authorities have criticised Microsoft over the privacy settings on its Windows 10 operating system. After complaints that the system breached the Data Protection Act in France, the country's National Data Protection Commission said that it found “many failures” in how the system protects users' details. The commission said that Microsoft's collection of data is “not necessary for the operation of the service”, and that it is done “without consent”. Data was also found to be transferred outside the EU, despite a decision by the European Court of Justice banning this. Harmit Kambo, campaigns director at Privacy International, said it was “unacceptable” to collect “data without consent”, and companies should be “called to account”. Microsoft now has three months to comply, but has said that it will “work closely” with the commission.