Comment by _Algernon_

It's questionable to me whether a court order of a non-eu court applies. "The law" is EU law, not American law.

If any non-eu country can circumvent GDPR by just making a law that it doesn't apply, the entire point of the regulation vanishes.