[danieljacksonno]

The question is what is legal or not.

The US has laws that give them the legal right to snoop on any data about EU (avd other foreign) citizens.

Those laws make it impossible to follow EU privacy laws as a US company.

One of the two have to give, and the US should make exceptions for EU citizens, or rescind the CLOUD act.

[pembrook]

This is the crux of the issue.

It's frustrating how many people are stuck in this loop, where they think any company can "easily" follow GDPR by just swapping data regions with their cloud provider. It's not that simple and never was.

This is a broader political spat between two of the largest government bodies in the world, not about facebook.

The EU is not the global privacy champion everyone makes them out to be. They just don't like that US companies can access EU citizens data specifically (since most of the internet is run by US companies). Whether they're okay snooping on their own citizens themselves is a separate issue--they've also regularly challenged encryption domestically.

I'm also certain the EU is not upset that certain 3 letter agencies in the US have access to Russian's private data when in the context of the war in the Ukraine. Like all governments, the EU only cares about their own interests, not about the philosophical idea of privacy in general.