IANAL but as I understand it there is, currently, no way to legally use a service for personal data handling that falls under the US CLOUD act. In theory Amazo

IANAL but as I understand it there is, currently, no way to legally use a service for personal data handling that falls under the US CLOUD act. In theory Amazon could license their brand and software to an independent (!) European company to offer a EU-AWS. Basically if an American judge/agency can order Amazon to hand over European private data and they have the ability to comply without involving a European court the service is not GDPR compliment. Now in practice this isn't how things are done but to the best of my knowledge the law hasn't changed (yet) and national dpas are starting to tighten the screws (slowly). If I recall correctly there are EU-US talks to create Privacy Shield #3.