But, companies like AWS claim that they voluntarily bind them selves to to provide much stricter privacy safeguards than the US law requires[0].
[0] https://aws.amazon.com/blogs/security/aws-and-eu-data-transf...