It looks like, following my article https://joinup.ec.europa.eu/news/cloudy-risks-gdpr, something is moving in the right direction:
#Microsoft is being investigated by the European Data Protection Supervisor:
https://edps.europa.eu/press-publications/press-news/press-releases/2019/edps-investigates-contractual-agreements_en