The GDPR doesn't require that foreign law enforcement agencies should never be allowed to access personal data. There just have to be equivalent legal protectio

The GDPR doesn't require that foreign law enforcement agencies should never be allowed to access personal data. There just have to be equivalent legal protections to what a EU citizen would get from their local law enforcement agencies. There are already a solid handful of countries (https://gdpr-info.eu/issues/third-countries/ https://gdpr-info.eu/issues/third-countries/) where data transfer is considered secure and I don't see any reason it should be impossible to negotiate a US return to the list.