https://www.theregister.co.uk/2019/10/21/eu_data_watchdog_has_serious_concerns_over_compliance_of_agreements_with_microsoft/

The European Data Protection Supervisor (EDPS) has expressed "serious concerns" over whether the contractual terms of agreements between EU institutions and Microsoft, for use of products such as Windows and Office 365, is compliant with data protection rules.

The statement is the preliminary result of an ongoing investigation launched in April to identify Microsoft products and services licenced by EU bodies and agencies, and to assess whether the Ts&Cs under which they are used complies with the GDPR, the EU's data protection legislation.