This is why some companies have a separate org for eu data where no us citizen has access. the data is in the eu and when the company is told to provide it the eu employees whe are the only ones with the passwords to get it are legally required to refuse. The company may be required to fire those employees - but that is all they can do, and eu employee protection laws will jump in the middle. the next step is an international diplomatic issuse that I refuse to speculate on.