The European Commission breached EU privacy rules when using Microsoft 365.