My company forbids using Teams for data that would be subject to GDPR. Guess they don't trust the Privacy Shield, but it still boggles the mind why we didn't go then for a solution that can be deployed on-premises.