Not commenting on the article itself, but the chosen title which is clickbait to me.

The assessment is about Office ProPlus (actually called Office 365 ProPlus - I don't know why it's called "Office ProPlus Enterprise" in the article/assessment which doesn't exist as a product). The assessment also complains about Office collecting data so I wouldn't say it is fair to say that "Microsoft’s enterprise products covertly gather personal data on users" (which really includes a lot more products than just Office). The blog posts title is actually "Impact assessment shows privacy risks Microsoft Office ProPlus Enterprise" which is more specific than "enterprise products".