controller only concerns your own personal data. But to which data subject personal data belongs to isn't always clear which adds onto the complexity. Given the consent challenges alone, it's highly questionable if Microsoft or even just the user can legally deploy this logware.