@rgarner It doesn't really matter where they host since they are an US organisation, and the US government claims jurisdiction of servers and data of US organisations no matter where they operate.
And yes, this is legislation that directly clashes with EU data protection laws, with the current status being that this contradiction is mostly just ignored by everyone involved. @Floppy