O365 infringes data protection rules
Back in 2021 the European Data Protection Supervisor (EDPS) opened two investigations. One into the use of Cloud Services (Amazon and Microsoft), and the other into the use of MS Office 365 by the European Commission.
Basically it’s to ensure that EU institutions are complying in relation to data