Regulation
US CLOUD Act
A US law that can compel US providers to hand over data — even when it is stored in Europe.
The US CLOUD Act (Clarifying Lawful Overseas Use of Data Act) obliges US companies to hand over data they control on the order of US authorities — regardless of which country the servers are in.
From this follows the central conflict with the GDPR: a US provider storing data in a European data centre can still be subject to US access orders. The ‘EU region’ moves the storage location, not the legal jurisdiction.
This conflict can only be avoided by keeping data out of the control of a provider subject to the CLOUD Act in the first place — for example through on-premise operation on your own infrastructure.