A German court has overturned a previous decision on the compliance with the GDPR of EU subsidiaries of US companies, finding that data protection concerns around the CLOUD Act are not enough to prevent a business entering into a contract with a US entity.