Anyone handling the personal information of an EU citizen needs to get their head around the General Data Protection Regulation (GDPR). Under these new laws that take effect in May 2018, companies will face stiff penalties if they breach rules designed to hand control of PII back to citizens. Microsoft says the Creators Update is compliant with the GDPR.
The GDPR is about a lot more than running the right software. While its laudable that Microsoft has made their OS as safe as possible, saying Windows 10 is GDPR compliant is like saying your car is safe just because it has anti-lock brakes.
GDPR compliance covers a whole bunch of things that can only be achieved through compliant behaviour and processes. So, while it's a good thing that Microsoft has made WIndows 10 more secure, it's not quite as simple as Microsoft makes out.