Does the Cloud Act give us a glimpse at a template for GDPR-like adequacy decisions in the US?