[disclaimer: I know this isn't the place for legal advice - not looking for it here, just wondering about other people's opinions]
We are a charity with an on premises 350 user Exchange server.
Recently Microsoft donated more than enough 365 licenses (Non Profit E1)to cover our needs.
I'm currently working through planninga potential migration and one question I'm not sure about is can we make use of O365 for email (putting aside other ways of storing data in that platform) given that we deal withsensitive personaldata,are based in the UK and that DP law states that we can not allow such data to leave the European Economic area.
MS advised me that in normal circumstances our data would reside in the EEA but given the nature of their system they couldn't guarantee it wouldn't end up in the US or elsewhere.
One option would be to declare via...