You could argue that the CLOUD act is in direct conflict with European data laws.

https://en.wikipedia.org/wiki/CLOUD_Act

However, it does not prevent data at rest being stored in the EU. Only that if requested the american company has to exfiltrate it to the states.

Thanks, it seems like indeed the US government could request that an EU subsidiary of a US entity provide data on an EU subject. This request could be lawful under US law but not EU and hence you'd have a conflict.

https://www.edps.europa.eu/sites/default/files/publication/1...