I&#x27;m not sure they still comply for the UK Data Protection Act. According to the Information Commisioner Office <a href="https:&#x2F;&#x2F;ico.org.uk&#x2F;for-organisations&#x2F;guide-to-data-protection&#x2F;principle-8-international&#x2F;" rel="nofollow">https:&#x2F;&#x2F;ico.org.uk&#x2F;for-organisations&#x2F;guide-to-data-protectio...</a> :<p>&gt; A company in the UK uses a centralised human resources system in the United States belonging to its parent company to store information about its employees.<p>or<p>&gt; A travel agent sends a customer’s details to a hotel in Australia where they will be staying while on holiday.<p>&gt; If you intend information on the website to be accessed outside the EEA, then this is a transfer.<p>This means if your data can be accessed outside the EEA e.g. you access your on-premise CRM on your African holiday, you are likely to void the Principle 8.