> "For greater transparency, we would welcome the publication of the detailed DSK report, with appropriate redaction, alongside the detailed responses Microsoft had provided the DSK."
Redactions? How should the data owners be able to verify Microsofts processes if some of the information is redacted?
IMNHO the most likely outcome is that o365 will come to be GDPR compliant - and so business will be able to (continue to) deliver on government contracts building on o365.