This report, commissioned by the Microsoft Strategic Vendor Management office (SLM Rijk) of the Ministry of Justice and Security, is a general data protection impact assessment (DPIA) on the processing of personal data related to the use of the Windows 10 Enterprise operating system. This report assesses the data protection risks for data subjects that may result from the collection of information about the use of Windows 10 Enterprise version 1809, released by Microsoft in the autumn of 2018. This report takes improvements into account introduced in version 1903, released end of May 2019. The report has been written by the Dutch privacy consultancy firm Privacy Company.