[josefx]

The crux is that in most cases the EU subsidiaries are not even set up to prevent that. They just roll over. Someone else tracked down the AWS GDPR compliance document the court case cites a few times, any governmental agency can request data transfers out of the EU. The document isn't even specific on which government and as far as I understand the North Korean government could request all EU users data and AWS would provide a download link without even thinking twice.