| I suspect that this is going to fall into the "nothing ever happens" bucket. What they're implying is that it is illegal for US companies to comply with EU law. This is significantly different than the EU enforcing the GDPR extraterritorially since that's basically just an increased cost of doing business in Europe and is apparently worth it. But if the US companies have to choose between complying with US extraterritorial law or EU extraterritorial law they're going to have to choose the US, for obvious reasons. It doesn't seem to me that convenient legal subsidiary structures or data physicality setups are gonna work here. The effect of US companies withdrawing cloud services would be devastating to the EU. Imagine if you could no longer access your gmail or outlook account, your apple or google photos disappear , whatsapp shuts down, all you companies documents are no longer accessible on Office365 or G drive. The results would be indistinguishable from a massive cyber attack and would take decades to recover from. There's just no way the EU would inflict a wound of this magnitude on itself. |