Headline is at least misleading, IMHO plain wrong. This is only in Hesse, one of the 16 states. This doesn’t mean this interpretation of the Hesse Data Protection Office is valid for the whole of Germany. /pedantic
Also misleading because of this, right at the top of the article:
> What is true for Microsoft is also true for the Google and Apple cloud solutions. The cloud solutions of these providers have so far not been transparent and comprehensibly set out. Therefore, it is also true that for schools the privacy-compliant use is currently not possible.
> - Hessian commissioner of Data Protection and Freedom of Information