The US CLOUD Act and GDPR
The CLOUD Act (or Clarifying Lawful Overseas Use of Data Act) was enacted in 2018 and is a federal law which gives US law enforcement authorities power to request access to data stored by most major cloud providers, even if that data is stored outside of the United States.
While there are safeguards within the CLOUD Act itself and the GDPR, there is no doubt that US authorities have the power to issue SCA orders against cloud providers to access data stored outside of the United States, which is why authorities in some countries suggest that public organizations should avoid cloud-based solutions whenever possible.