Spath:
The GPDR rules only apply to the use of data held by organisations (for emailing purposes, etc). They don't apply to simply accessing one's email on a US-based site (such as Outlook.com). So it appears to me that the message that JJ is seeing from Microsoft is probably unrelated to the new regulations in the UK.