Where is the cooperation and the question of liability regulated?

This article describes how data security is ensured in relation to Microsoft Azure.

Security and data protection play a central role in Microsoft Azure and the associated cloud. The global Microsoft Azure infrastructure complies with the requirements of the European General Data Protection Regulation and Swiss data protection legislation. You can find out more about data protection at Microsoft here.