Since the landmark Schrems II ruling in 2020, transferring personal data to US-based services like Ben's Original (Uncle Ben's) has become a significant legal risk for EU organizations. The US CLOUD Act gives American authorities the power to access data held by US companies, regardless of where that data is physically stored — even if it's in an EU data center.
While the EU-US Data Privacy Framework (DPF) adopted in 2023 provides a new legal basis for transfers, privacy experts and legal scholars have raised concerns about its long-term viability. The framework could face the same fate as its predecessors (Safe Harbor and Privacy Shield), both of which were struck down by the Court of Justice of the EU.
For organizations that want to eliminate compliance risk entirely, switching to a European-based food & beverages is the most straightforward solution. Below are the best GDPR-compliant alternatives to Ben's Original (Uncle Ben's), all headquartered in Europe with data stored in EU data centers.