Anybody here who can assess how relevant this is for data safety regulations and laws within EU?

"Microsoft Copilot just quietly allowed sending data outside of the EU" (https://cybernews.com/ai-news/microsft-copilot-eu/)