Microsoft published at the end of the last year a new version of the Cloud Security Alliance Cloud Control Matrix. This new 1.1 mb version is published at 15. December 2015. This paper is a great overview how Office 365 maps to the security, privacy, compliance, and risk management controls defined in the Cloud Security Alliance Cloud Control Matrix.
For the European citizen and companies you can connect it with the EU Rules and share the document with your data privacy officer.
https://www.microsoft.com/en-us/download/details.aspx?id=50726&WT.mc_id=rss_office_365