[{"data":1,"prerenderedAt":417},["ShallowReactive",2],{"navigation-docs_en":3,"/en/blog/cloud-act-2026-posts_en":51,"/en/blog/cloud-act-2026-surround-posts_en":406},[4],{"title":5,"path":6,"stem":7,"children":8,"page":25},"En","/en","en",[9],{"title":10,"path":11,"stem":12,"children":13,"page":25},"Docs","/en/docs","en/1.docs",[14,26],{"title":15,"path":16,"stem":17,"children":18,"icon":25},"Getting Started","/en/docs/getting-started","en/1.docs/1.getting-started/1.index",[19,21],{"title":20,"path":16,"stem":17,"children":-1},"Introduction",{"title":22,"path":23,"stem":24,"children":-1},"Migration Roadmap","/en/docs/getting-started/migration-fahrplan","en/1.docs/1.getting-started/2.migration-fahrplan",false,{"title":27,"path":28,"stem":29,"children":30,"page":25},"Technologies","/en/docs/technologies","en/1.docs/2.technologies",[31,35,39,43,47],{"title":32,"path":33,"stem":34,"children":-1},"Nextcloud","/en/docs/technologies/nextcloud","en/1.docs/2.technologies/1.nextcloud",{"title":36,"path":37,"stem":38,"children":-1},"Matrix / Element","/en/docs/technologies/matrix","en/1.docs/2.technologies/2.matrix",{"title":40,"path":41,"stem":42,"children":-1},"ONLYOFFICE","/en/docs/technologies/onlyoffice","en/1.docs/2.technologies/3.onlyoffice",{"title":44,"path":45,"stem":46,"children":-1},"Ubuntu Linux","/en/docs/technologies/ubuntu","en/1.docs/2.technologies/4.ubuntu",{"title":48,"path":49,"stem":50,"children":-1},"Keycloak","/en/docs/technologies/keycloak","en/1.docs/2.technologies/5.keycloak",{"id":52,"title":53,"authors":54,"badge":60,"body":62,"date":394,"description":395,"extension":396,"faq":397,"howto":397,"image":398,"meta":400,"navigation":401,"path":402,"seo":403,"stem":404,"__hash__":405},"posts_en/en/3.blog/4.cloud-act-2026.md","The CLOUD Act, Simply Explained – and What It Means for Your Data",[55],{"name":56,"to":57,"avatar":58},"Michael Wolf","https://snowblue.de/about",{"src":59},"/michael.webp",{"label":61},"Data Protection",{"type":63,"value":64,"toc":381},"minimark",[65,69,78,83,86,89,93,100,103,107,110,132,135,139,142,200,209,213,240,244,270,274,277,344,347,351,357,363,367,374],[66,67,53],"h1",{"id":68},"the-cloud-act-simply-explained-and-what-it-means-for-your-data",[70,71,72,73,77],"p",{},"When people talk about cloud services, one term keeps popping up: the ",[74,75,76],"strong",{},"CLOUD Act",". It sounds complicated, but the core idea is quick to explain. In this article we'll look at what it's about – and why many small businesses, law firms and medical practices are interested in solutions where they decide for themselves where their data lives.",[79,80,82],"h2",{"id":81},"what-is-the-cloud-act","What is the CLOUD Act?",[70,84,85],{},"The CLOUD Act is a US law from 2018. The name stands for \"Clarifying Lawful Overseas Use of Data Act\". Put simply, it sets out under which conditions US authorities can request data from providers based in the US – even when that data is stored on servers outside the US.",[70,87,88],{},"This isn't a secret; it's publicly known. The big providers are open about it and describe in their documentation how they handle such requests.",[79,90,92],{"id":91},"why-is-this-a-topic-in-europe","Why is this a topic in Europe?",[70,94,95,96,99],{},"In Europe, the ",[74,97,98],{},"GDPR"," (General Data Protection Regulation) applies. It governs how personal data – names, addresses, emails, health data – may be processed. If data can be transferred to countries outside the EU, there needs to be a suitable legal basis for it.",[70,101,102],{},"For most businesses, that simply means: you should know which services you use, where your data is stored, and what your contract with the provider says. That's part of good documentation, no drama needed.",[79,104,106],{"id":105},"who-is-this-especially-relevant-for","Who is this especially relevant for?",[70,108,109],{},"Basically everyone who works with personal data. People who tend to pay extra attention include:",[111,112,113,120,126],"ul",{},[114,115,116,119],"li",{},[74,117,118],{},"Law firms and tax offices"," – because of confidentiality towards clients",[114,121,122,125],{},[74,123,124],{},"Medical and therapy practices"," – because of sensitive health data",[114,127,128,131],{},[74,129,130],{},"Clubs and small businesses"," – who simply want peace of mind",[70,133,134],{},"If you're unsure what applies to your situation, it's best to talk to your data protection adviser or a lawyer. I can support you with the technical side, but I don't replace legal advice.",[79,136,138],{"id":137},"a-simple-alternative-data-in-europe","A simple alternative: data in Europe",[70,140,141],{},"If you like, you can run your most important services with European providers or on your own server. With open source, that works really well today:",[143,144,145,158],"table",{},[146,147,148],"thead",{},[149,150,151,155],"tr",{},[152,153,154],"th",{},"Before",[152,156,157],{},"Open-source alternative",[159,160,161,169,177,185,193],"tbody",{},[149,162,163,167],{},[164,165,166],"td",{},"OneDrive, SharePoint, Dropbox",[164,168,32],{},[149,170,171,174],{},[164,172,173],{},"Teams, Slack",[164,175,176],{},"Element (Matrix)",[149,178,179,182],{},[164,180,181],{},"Word, Excel online",[164,183,184],{},"ONLYOFFICE or Collabora",[149,186,187,190],{},[164,188,189],{},"Cloud password manager",[164,191,192],{},"Vaultwarden",[149,194,195,198],{},[164,196,197],{},"One login for all services",[164,199,48],{},[70,201,202,203,208],{},"These programs run, for example, in data centres in Germany or on a device in your office. That way you know exactly where your data is. You'll find more examples under ",[204,205,207],"a",{"href":206},"/en/alternativen","Alternatives",".",[79,210,212],{"id":211},"a-relaxed-way-to-go-about-it","A relaxed way to go about it",[214,215,216,222,228,234],"ol",{},[114,217,218,221],{},[74,219,220],{},"Get an overview:"," Which cloud services do you actually use?",[114,223,224,227],{},[74,225,226],{},"Important things first:"," Where is your most sensitive data?",[114,229,230,233],{},[74,231,232],{},"Test one thing:"," For example, move your file storage to Nextcloud first.",[114,235,236,239],{},[74,237,238],{},"Step by step:"," If that goes well, tackle the next area.",[79,241,243],{"id":242},"a-few-terms-briefly-explained","A few terms, briefly explained",[111,245,246,252,258,264],{},[114,247,248,251],{},[74,249,250],{},"Personal data:"," Any information that can be linked to a person.",[114,253,254,257],{},[74,255,256],{},"Data processing:"," A service provider processes data on your behalf, such as a cloud provider. For this you sign a data processing agreement (DPA).",[114,259,260,263],{},[74,261,262],{},"Third country:"," A country outside the EU or the European Economic Area.",[114,265,266,269],{},[74,267,268],{},"Data centre location:"," The place where the servers physically stand.",[79,271,273],{"id":272},"what-you-can-write-in-your-documentation","What you can write in your documentation",[70,275,276],{},"A simple overview is often enough. For example:",[143,278,279,298],{},[146,280,281],{},[149,282,283,286,289,292,295],{},[152,284,285],{},"Service",[152,287,288],{},"Provider",[152,290,291],{},"Data location",[152,293,294],{},"Which data",[152,296,297],{},"DPA in place?",[159,299,300,316,330],{},[149,301,302,305,308,310,313],{},[164,303,304],{},"Email",[164,306,307],{},"…",[164,309,307],{},[164,311,312],{},"client correspondence",[164,314,315],{},"yes/no",[149,317,318,321,323,325,328],{},[164,319,320],{},"Files",[164,322,307],{},[164,324,307],{},[164,326,327],{},"quotes, contracts",[164,329,315],{},[149,331,332,335,337,339,342],{},[164,333,334],{},"Chat",[164,336,307],{},[164,338,307],{},[164,340,341],{},"internal coordination",[164,343,315],{},[70,345,346],{},"When clients ask where their data is stored, you'll have the answer ready straight away. And you'll see at a glance where it might be worth trying an alternative.",[79,348,350],{"id":349},"frequently-asked-questions","Frequently asked questions",[70,352,353,356],{},[74,354,355],{},"Do I have to get rid of all US services now?","\nNo. This isn't about bans, it's about making a conscious decision. Many businesses start with the area where the most sensitive data lives.",[70,358,359,362],{},[74,360,361],{},"Is choosing a data centre in the EU enough?","\nLocation is an important building block. Just as important are the contract, the subprocessors and who runs the service. With open source on your own or a European server, all of that is in your hands.",[79,364,366],{"id":365},"conclusion","Conclusion",[70,368,369,370,208],{},"The CLOUD Act is no reason to panic, but it's a good reason to think about where your data should live. Open-source solutions in Europe are a practical way to keep that in your own hands. If you'd like advice on this, have a look at ",[204,371,373],{"href":372},"/en/consulting","Consulting",[70,375,376,377,208],{},"If you'd like to give it a try, I'm happy to help – ",[204,378,380],{"href":379},"/en/contact","just drop me a line",{"title":382,"searchDepth":383,"depth":383,"links":384},"",2,[385,386,387,388,389,390,391,392,393],{"id":81,"depth":383,"text":82},{"id":91,"depth":383,"text":92},{"id":105,"depth":383,"text":106},{"id":137,"depth":383,"text":138},{"id":211,"depth":383,"text":212},{"id":242,"depth":383,"text":243},{"id":272,"depth":383,"text":273},{"id":349,"depth":383,"text":350},{"id":365,"depth":383,"text":366},"2026-04-22T00:00:00.000Z","What is the CLOUD Act, and why are many businesses interested in cloud solutions in Europe? A calm explanation without jargon.","md",null,{"src":399},"/img/blog/photo-1639762681485-074b7f938ba0.webp",{},true,"/en/blog/cloud-act-2026",{"title":53,"description":395},"en/3.blog/4.cloud-act-2026","-kNLPS6ngLzRbC3vDEQujAUJho5VyETCb2u3moTY7Eg",[407,412],{"title":408,"path":409,"stem":410,"description":411,"children":-1},"Taking Your Data with You – Portability, the DMA and Open Formats","/en/blog/dma-azure-gatekeeper-november-2026-portability-exit-microsoft-365","en/3.blog/33.dma-azure-gatekeeper-november-2026-portability-exit-microsoft-365","With the DMA and the Data Act, the EU is strengthening the right to take your data along. What data portability means and how open formats keep you flexible.",{"title":413,"path":414,"stem":415,"description":416,"children":-1},"EuroStack, Simply Explained – European Building Blocks for Your IT","/en/blog/eurostack-digital-sovereignty","en/3.blog/5.eurostack-digital-sovereignty","What's behind the idea of \"EuroStack\"? A friendly overview of European and open-source building blocks you can already use today.",1792720370748]