INTELLIGENCE BRIEF
firm for AML Failings FATF grey-lists three new jurisdictions ahead of plenary session New EU AMLD6 implementation deadline configuration FATF grey-lists three new jurisdictions ahead of plenary session firm for AML Failings FATF grey-lists three new jurisdictions ahead of plenary session New EU AMLD6 implementation deadline configuration FATF grey-lists three new jurisdictions ahead of plenary session
vol VII . ISSUE 24 . 24 JUN 2026
Italian Competition Authority Investigates Microsoft Over Microsoft 365 AI-Linked Price Increase
Breaking . AML

Italian Competition Authority Investigates Microsoft Over Microsoft 365 AI-Linked Price Increase

Insight . Intelligence . Accountability

32 Views
0 Comments
News & Analysis 30 Jun, 2026

A new wave of professionals is transforming Governance, Risk, and Compliance from a rigid framework into a dynamic force for trust, innovation, and resilience. Governance, Risk, and Compliance (GRC) has long been associated with boardrooms and bureaucracy—a domain reserved for executives and auditors. But that image is changing fast.

By GRC Report Staff

Key Takeaways
  • Consumer Protection Investigation: The Italian Competition Authority has opened an investigation into Microsoft Ireland Operations and Microsoft over the Microsoft 365 subscription price increase.

  • AI Service Integration: Regulators are examining whether Microsoft clearly informed consumers that Copilot and Designer AI services had been integrated into Microsoft 365 before the subscription price increased.

  • Default Higher-Priced Plan: The Authority alleges consumers were automatically moved to a more expensive subscription unless they exercised their right to withdraw.

Deep Dive

The Italian Competition Authority has opened an investigation into Microsoft Ireland Operations and Microsoft, arguing that the company may have crossed that line when it increased the price of Microsoft 365 after incorporating its Copilot and Designer artificial intelligence services into the subscription.

According to the Authority, Microsoft's communications surrounding the change were fragmented, leaving consumers without a sufficiently clear explanation that the higher-priced subscription now included the AI services. That distinction sits at the center of the case. The concern is not simply that the subscription became more expensive, but that consumers may not have been able to properly assess why it became more expensive or whether the additional services justified renewing on the new terms.

The Authority also alleges that existing subscribers were placed by default onto the higher-priced plan unless they exercised their right to withdraw. That approach has prompted regulators to examine not only the substance of Microsoft's communications but also the mechanics of the renewal process itself.

Information That Allows a Choice

Italian consumer law requires businesses to provide information that allows consumers to make informed purchasing decisions. The Authority said Microsoft's conduct may have fallen short of that standard by failing to give subscribers enough information to evaluate the changes made to the service before deciding whether to renew.

The investigation goes further than disclosure alone. The Authority is also considering whether Microsoft's approach amounted to an aggressive commercial practice because the way the changes were communicated may have unduly restricted consumers' freedom of choice. In the regulator's preliminary view, automatically moving subscribers onto a more expensive plan unless they actively opted out could have diminished consumers' ability to make a genuinely informed decision.

The investigation remains at an early stage. The Authority has not concluded that Microsoft violated consumer protection rules, and the opening of proceedings does not predetermine the outcome.

The GRC Report is your premier destination for the latest in governance, risk, and compliance news. As your reliable source for comprehensive coverage, we ensure you stay informed and ready to navigate the dynamic landscape of GRC. Beyond being a news source, the GRC Report represents a thriving community of professionals who, like you, are dedicated to GRC excellence. Explore our insightful articles and breaking news, and actively participate in the conversation to enhance your GRC journey.

Comments (2)

Magna magnam iste et

17 July, 2026 07:55 PM
https://www.keniki.me.uk

Asperiores totam exp

Non ut quis tenetur

17 July, 2026 07:38 PM
https://www.takefeluc.me.uk

Ratione dolorem do q

Leave a comment

Your email address will not be published. Required fields are marked with *

Similar Articles
A network that laundered more than four million euros from scams by sending the money to Nigeria falls

A network that laundered more than four million euros from scams by sending the money to Nigeria falls

Spanish Police Bust €4 Million International Money Laundering Ring Bound for Nigeria. The Spanish Civil Guard has dismantled a criminal network responsible for laundering over €4 million generated through cyber fraud, CEO scams, and identity theft across Europe. The organization utilized "smurfing"—splitting large illicit funds into more than 9,200 small-wire transfers using falsified passports and stolen identities—to bypass anti-money laundering controls and funnel cash into Nigeria. The two-phase operation led to 20 arrests, investigations into 11 others, and raids targeting key leaders in Bilbao as well as several complicit money transfer agencies.

Read Full Brief
07 Aug 2026
U.S. Regulators Hit UBS With $173 Million in Coordinated AML Enforcement Action

U.S. Regulators Hit UBS With $173 Million in Coordinated AML Enforcement Action

Eight years after promising regulators it would fix persistent weaknesses in its anti-money laundering controls, UBS is paying for what those regulators say it failed to finish.

Read Full Brief
04 Aug 2026
FATF's June Plenary Trims the Grey List — Africa's Compliance Burden Isn't Going Away

FATF's June Plenary Trims the Grey List — Africa's Compliance Burden Isn't Going Away

The Financial Action Task Force closed its June 2026 plenary by removing Algeria and Namibia from its list of jurisdictions under increased monitoring, while adding Bosnia and Herzegovina and Iraq. For African compliance functions, the headline delisting matters less than what it confirms about the direction of travel.

Read Full Brief
04 Aug 2026
RegTech Won't Save You From a Bad Governance Model. It Will Just Automate It Faster.

RegTech Won't Save You From a Bad Governance Model. It Will Just Automate It Faster.

Every compliance leader I meet is being asked, in some form, what their AI strategy is. Almost none of them are being asked the more important question first: what is your governance model for the AI you already have?

Read Full Brief
04 Aug 2026
The EU AI Act's August Deadline Arrives — Just Not the One Everyone Expected

The EU AI Act's August Deadline Arrives — Just Not the One Everyone Expected

High-risk AI obligations for financial services have been pushed back sixteen months. Transparency rules for chatbots and synthetic media have not moved at all — and enforcement power against general-purpose AI providers switches on this week.

Read Full Brief
04 Aug 2026
Third-Party Risk Is a Board Issue Now, Not a Procurement Checklist

Third-Party Risk Is a Board Issue Now, Not a Procurement Checklist

Outsourcing does not outsource accountability. Regulators have said this for years. Boards are only now starting to act as though they believe it.

Read Full Brief
04 Aug 2026
Recommended Articles
See all

No recommended articles found.