Since their training, workflow, and existing data/applications centers around Windows and Office and they are a comparatively big customer, it is probably easie

Since their training, workflow, and existing data/applications centers around Windows and Office and they are a comparatively big customer, it is probably easier/cheaper for them to strong arm Microsoft into compliance than moving to an alternative operating system and office suite. The interesting take-away from the article and the linked article is that in part they used the GDPR and Dutch privacy laws to force Microsoft into compliance: The processing of diagnostic data for so many broad and undefined purposes is contrary to the principle of purpose limitation. Additionally, in most cases, there is no legal basis for processing the diagnostic data for these purposes. As (sole or joint) controller, Microsoft cannot rely on the consent of employees as referred to in the GDPR because of the dependent position of employees. At the same time, consent is required under Section 11.7a of the Dutch Telecommunications Act for retrieving data via the Internet, through built-in software, if such processing is not strictly necessary. Which means that the GDPR does have teeth, which is good for everyone in the EU, not just governments or larger organizations. Similarly, the EU court of justice has recently decided based on the GDPR that web sites must ask consent for sending personal data by loading Facebook like buttons: https://www.reuters.com/article/us-eu-facebook-dataprotection/companies-using-facebook-like-button-liable-for-data-eu-court-idUSKCN1UO1B4 https://www.reuters.com/article/us-eu-facebook-dataprotectio...