According to the EU cloud association CISPE, the BSI's new C3A criteria catalog does not protect against US laws but cements ...