Comment by parchley

You might want to read up on the Schrems II (2) case regarding the GDPR and a US company.