In 2018, Congress passed the Clarifying Lawful Overseas Use of Data Act, the CLOUD Act, amending the Stored Communications Act. The CLOUD Act removed restrictions on U.S. companies’ responding directly to foreign countries investigating serious crimes.
The law allows the federal law enforcement officials to subpoena cloud data stored on servers located in foreign countries. The CLOUD Act authorizes the White House to reach agreements with foreign governments providing for a process to transfer data. State and the AG must confirm that the other country has adequate measures in place to protect the privacy of U.S.citizens’ data.