Even if US cloud providers are running their own data centers in Europe, the data stored there is not protected from access under the FISA Act, according to Schrems. Also, new SCC versions will be much more complicated to apply, says Europe’s most well-known data protection activist.