The point that stands out to me is - Data still being transferred outside EU on a “safe harbour” basis: Microsoft’s transferring account holders’ personal data

The point that stands out to me is - Data still being transferred outside EU on a “safe harbour” basis: Microsoft’s transferring account holders’ personal data to the US on a “safe harbor” basis, in spite of the Safe Harbor agreement having been ruled invalid by the top EU court in October 2015. That is the one most likely to be a big issue for businesses running non-Enterprise versions (i.e. Pro).