A recent global outage of Microsoft had widespread reach, but its impact proved uneven. Starting around 16:17 UTC on Thursday, services from the American tech giant, including Outlook, Teams, Exchange Online, SharePoint, OneDrive, and Copilot, experienced degraded performance for over ten hours. This disruption affected at least 74 countries, with complaints about Outlook on the Downdetector platform, which aggregates user reports of outages, peaking at around 140,000.
The greatest damage was concentrated in America, Europe, and Australia. Governments did not view this issue solely as a private sector matter. Germany's Federal Office for Information Security (BSI) reported that it was in contact with Microsoft, and that 'many companies' lost access to core cloud services. Australia's Home Affairs Minister, Tony Burke, stated that he activated a mechanism requiring Microsoft to prioritize the country's recovery after the Australian Federal Police and the internal intelligence agency ASIO confirmed they were affected. The Japanese government reported a disruption to its general administrative IT infrastructure, GSS, forcing some ministries to revert to telephone communications. The Supreme Court of the Philippines warned of delays in electronic responses and online transactions.
China, however, remained outside the zone of this impact.
Reasons Why China Was Not Affected
Although many multinational corporations in Shanghai using the global Microsoft platform, as well as Chinese exporters whose partners use Outlook, experienced issues, and some foreign firms and personnel associated with foreign companies using the global version were also affected, the country as a whole remained unaffected. This is because Microsoft 365 in mainland China is not managed by Microsoft itself. It is licensed to the company 21Vianet—a Chinese data center and cloud service provider that operates in the country in a physically and logically isolated instance. Accounts hosted by 21Vianet are separated from the global Microsoft cloud, so they were not subject to the global outage.
Government agencies and state-owned enterprises are actively transitioning to domestic services such as the WPS office suite, the DingTalk corporate collaboration platform, WeCom for internal communication and customer interaction, and Feishu—an integrated platform for documents, meetings, tasks, and management. Many of these replacements are planned to be completed by 2027. Consequently, the incident at Microsoft's headquarters in Redmond is not a national event for China.
Legal Framework
China's strict data laws have forced data and operations to move onto domestic territory, making cross-border transfer conditional rather than automatic. It is subject to security assessment, certification, or the conclusion of a standard contract. Over the past decade, China has built a legal system through the Cybersecurity Law, the Data Security Law, and the Personal Information Protection Law. In practice, this means that data is protected depending on its sensitivity, critical infrastructure operators receive additional guarantees, and exporting data abroad is not standard practice. Companies must first undergo a security review, obtain a certificate, or sign standard agreements. The goal of this policy is not to shut down the internet, but to make the legal and technical basis of connectivity a matter of sovereign choice.
Limits of Immunity
However, this immunity is partial and should not be idealized. The main risk—extreme concentration in the hands of a few massive cloud providers—applies equally to Chinese services such as Alibaba Cloud, Huawei Cloud, and Tencent Cloud. What is truly important is that true digital sovereignty does not equal self-sufficiency. An isolated system can fail on its own and unnoticed, without external oversight. More important is having an exit strategy: data that can be packaged and moved, compatible standards, contractual rights for audit and migration, and mandatory disclosure during system failures. The outage demonstrated that putting all resources in one basket has its price. China seeks to find a balance between openness to the world and maintaining its national cyber sovereignty.
