Surf, the Dutch national educational IT institute, conducted a data protection impact assessment. The report itself: (also linked in the article)
https://www.surf.nl/files/2024-12/20241218-dpia-microsoft-36...
Tech Lead @ GoAbout (https://goabout.com)
[ my public key: https://keybase.io/jcassee; my proof: https://keybase.io/jcassee/sigs/gbT_EqJ8F-t3-5IN2f5fvsR2bPdO5sspynhOTSqtjbc ]