> but rather that the data and control remain within the jurisdiction of EU law The fundamental problem is that EU and US law are incompatible. FISA allows the

> but rather that the data and control remain within the jurisdiction of EU law The fundamental problem is that EU and US law are incompatible. FISA allows the US to access any data from any US company no matter where it is located. It doesn't matter that the data is located in the EU, on a European server, manager by the European division of a company. As long as there exists a US parent company, FISA can compel the data. And that is fundamentally against the GDPR.