Datacentre location does not protect your data: the Cloud Act targets the company operating it. What the law says, and what to look at instead.