Comment by trimethylpurine

I'm not sure if it's accurate, but according to the summary on Wikipedia at least, the law "provides mechanisms for the companies or the courts to reject or challenge these if they believe the request violates the privacy rights of the foreign country the data is stored in."[0]

If that's accurate, your country's privacy laws would supersede US law. That said, as things are going, it's unlikely that they do.

[0] https://en.wikipedia.org/wiki/CLOUD_Act