as far as I understand, the US government does not protect the rights of EU citizens, so US-hosted services are not GDPR compliant. There was a special agreement to keep them legal, "privacy shield", which was taken down by EU Courts because of US government overreach. https://en.wikipedia.org/wiki/EU%E2%80%93US_Privacy_Shield#L...