The British Data Protection Authority ICO considers operating systems that are no longer supported inadequate security.
If systems such as Windows 7 and Windows Server 2008 R2 SP1 are no longer supported by Microsoft, this may result in inadequate security, which could then be seen as an infringement of article 32 [...]