This is entirely untrue. AWS and Azure are most definitely able to offer GDPR-compliant in-region hosting options and I'm sure GCP can to (I just don't know their offering as well).