Well technically (I am not a lawyer but studied a bit during college and I continue to read or watch content about it) microsoft is a contractor for douchebank, so it is douchebank that is responsible for its contractors to respect GDPR. DoucheBakn has to verify that microsoft respects GDPR (which is impossible because they are US based (having a european subcompany does not protect)) and can (and should) be fined for any infraction regarding data management. Now, the real trouble lay in GDPR enforcement. Benjamin Bayart (a french cool guy) explained that we have a culture problem (maybe rooted in capitalism), where we don't fine american companies properly. We have the abilities to fine them into oblivion to dissuade everyone to do shitty stuff with our data, but we don't and it is sad.
Also, the dependency to american big techs is a big loss that will be painful to remove, but should be done.
La fameuse droiture des gens de droite, toujours prêt à assumer leur discours et les conséquences qui vont avec.