The Article 29 Working Party has published some new guidance on how BCR companies should respond to data requests from foreign government authorities. The guidance has been updated to address the issue encountered by companies that are forced to be in breach of either foreign legal requirements for noncompliance or European data protection rules if they do comply with a data disclosure order.

http://ec.europa.eu/justice/data-protection/article-29/documentation/ opinion recommendation/files/2015/wp204.rev_en.pdf