Your data, their rules: The growing risks of hosting EU data in the US cloud