>And, as the processor, they are required to do as the controller (you) instructs. There seems to be a terminology issue here, "You" would generally be the dat

>And, as the processor, they are required to do as the controller (you) instructs. There seems to be a terminology issue here, "You" would generally be the data subject, not the data controller, unless you are a company. If you're directly using Office 365 or Google workspace, then MSFT/Google would be the data controller (the primary company who handles the private data), and any subcontractors involved would be data processors on behalf of the controller. If you're a user in the school system, and have no direct agreement with MSFT/Google, then the school may be the data controller and MSFT/Google handling that data on behalf of the school.