gdpr and third country transfers

This tag covers discussions about GDPR compliance challenges related to transferring personal data from the European Union to third countries. Content focuses on Microsoft 365 Copilot's Flex Routing feature, which routes EU tenant AI inference requests to servers in the United States, Canada, or Australia during peak demand while keeping data at rest within the EU Data Boundary. The feature raises concerns for administrators and privacy officers about maintaining data residency as a policy versus a runtime condition, highlighting the tension between GDPR requirements for adequate safeguards in third-country transfers and operational needs for AI service resilience.