After a little more research (this is not legal advice and DYOR) The EU subnet is not GDPR compliant for personal data etc. But with the correct setup Cloud Engines can be (as can Utopia). With a Cloud Engine the consortium providing the Cloud Engine can sign the DPA. Not sure if @dominicwilliams agrees with that 