Baden-Württemberg Procurement Chamber decides US Cloud Services are not GDPR compliant

This entails that even if a server is operated by a company based in the EU but has a parent company in the US, the data transfer is still not allowed due to the possibility of that data being accessed by its non-European counterparts.