Ivo Opstelten, the Dutch minister of security and justice, (the Dutch lower house) last week that the government is contemplating excluding American cloud providers from government bids. Dutch government agencies need to protect government information and citizen data from being accessed by the U.S., and so bids must be able to meet demands that cloud providers do not hand over any information to the U.S.

"That basically means that companies form the United States are excluded from such [government] bids and contracts," Opstelten said in the letter.

Excluding U.S. cloud providers is not official policy yet. However, Vincent van Steen, spokesperson for the ministry of the interior, confirmed that the Dutch government is considering a ban on U.S. cloud providers like Microsoft and Google. "The minister is considering this", he said in an email. "This means that it could be a requirement for tenders and the awarding of contracts."

Nigel Murray, managing director of the consultancy firm Huron Legal, confirmed the Patriot Act could override European data and privacy legislation in on Wednesday. "If data is transferred to the United States under the Safe Harbor protocol or an American injunction, U.S. Regulators can retrieve the data using the Patriot Act. This usually happens without the person concerned knowing anything about it," Murray told Webwereld.

Not only governments but also businesses should refrain from doing business with American cloud providers, experts advised in the Webwereld article. Professor Jeanne Mifsud Bonnic, expert in European technology law and human rights at the University of Groningen, reckoned that the current situation creates a "beautiful opportunity" for European cloud providers to make some headway in the European market.