Good thoughts. But if you took care of your contracts and transfer impact assessments, it was possible to be compliant with the GDPR while using good US service providers. Also, the US are catching up in regards of privacy laws and California is just one good example for that. Some ideas in there exceed the GDPR in ways that protect people even better. And yeah, I’m speaking as a European data protection lawyer here and not the typical “USA, USA” fanboy. Credit where credit’s due