French court ruling considers lawfulness of using EU subsidiary of US cloud service provider post-Schrems II
The Conseil d’État, France’s highest administrative court, recently ruled that personal data collected via a platform managed by Doctolib, and hosted by an EU subsidiary of a US-based company (subject to US surveillance laws), was in line with the GDPR. The ruling is an important follow-up to Schrems II.…