How to comply with both the GDPR and the CLOUD Act
U.S. CLOUD Act’s compatibility with the EU General Data Protection Regulation is still an open question.
With regard to data transfer to third countries for which such transfer is subject to the GDPR, Articles 44 to 50 of the GDPR apply. In particular, Article 48 of the GDPR comes into play when EU data is being requested by a U.S. law enforcement agency.
Full article: How to comply with both the GDPR and the CLOUD Act