EU take a knee to the USA:

A crucial aspect of the sovereignty requirements has been to what extent the European subsidiary of a cloud provider can be considered under the parent company’s or group’s control.

The requirement that the cloud service providers would have to be operated only by EU-based companies with no non-European entity exerting effective control has been slightly softened for the level of assurance high+.

In particular, the new text adds the possibility to demonstrate that they have put in place effective technical, organisational and legal measures that prevent non-EU companies linked with the cloud provider from exerting a decisive influence in decisions related to investigation requests.