The 8 steps outlined in “The EDPS quick-guide to necessity and proportionality” will help you assess the compatibility of measures impacting the fundamental rights to privacy and to the protection of personal data with the EU Charter of Fundamental Rights.
EU Commission’s Microsoft 365 Usage Breaches GDPR
EU Commission violates GDPR with Microsoft 365 usage, faces corrective measures by EDPS.