The European General Data Protection Regulation (GDPR) has brought important changes to the legal grounds for data transfers between the EU and the United States. Simultaneously, a new act in the United States has come into force that also affects data transfers between the United States and the EU. This act, the Clarifying Overseas Use of Data Act (the CLOUD Act) creates legal uncertainty and could lead to violations of GDPR.
