If &quot;company X&quot; (a customer of Amazon) is sharing EU citizens data through amazon AWS to the US, who is sharing the data? Amazon or &quot;company x&quot; ?<p>Amazon has approval from EU data protection authorities, but &quot;company X&quot; apparently doesn&#x27;t need approval?