@WebflowCommunityTeam Please give us an update. Thanks.
There’s been an update on this. The CNIL and other privacy law enforcement agencies across Europe recommend encrypting the personal data. As long as any Webflow employee or data processors can’t see or collect plain non-encrypted data. Webflow should be GRPD compliant.
@WebflowCommunityTeam Is form data encrypted on your end ?
I Don’t think that’s enough @ColibriMedia? A DPO (Data Protection officer) that I am working with on a project, is insisting on hosting in the EU which rules out Webflow for this job as things stand unfortunatly.
My business partner will not use Webflow currently because she doesn’t know if the system is future-proofed for EU users in this way.
The radio silence about Webflow’s plans is really worrying at this stage. I don’t need anything concrete now - but a hint as to whether the european data center option is a possibility or not would be reassuring.
@Shaneod For the current context, it seems to be enough. All the big web companies are using SCCs. As for “Future-proofing”. I do not think that EU will enforce this further but that’s just my 2 cents.
What about using a different form processor and still use Webflow ?
@WebflowCommunityTeam Just lost a client due to the vague state and no answers.
EU Hosting would be the deal.
@ColibriMedia Do oyu have a tip for a “european” form processor ?
@zickert Unfortunately, form processors are either vague about it or processing data outside EU.
This is stupid though. I would not feel safer using Wordpress + Contact Form 7.
A data leak is also subject to receive a huge fine from regulators. Though from what everyone is saying self-hosted personal data would be the only way to be fully compliant.
I checked privacy policies from the biggest web companies they are all pretty much using the same derogations as Webflow.
So goodbye Google, Hubspot, Webflow, Squarespace, Wix … If we listen to fears.
In the end 98% of clients will receive their form data through Gmail or Microsoft services.
Was talking to Webflow support and as @ColibriMedia says SCCs seems to be the legal route most of the big companies are using now pending further clarification from the EU as to what they are supposed to do.
I too chased up Webflow support and DPA and SCC’s are what they suggest. For me as a lowly and brand new designer this is not good enough and I have decided to quit pursuing web design, at least for now. I simply cannot afford something going wrong and I cannot afford legal advice/protection. Just too much grey area for me.
I know most would just ignore it, the odds of something going wrong is slim, but I cannot in good conscience advise my clients to work with Webflow, when I cannot fully understand their DPA and I do not necessarily want to have to rely on my clients legal team without having my own legal protection too. So it is just too vague for me.
I spoke to youtubers, other members on this forum and designers in other social media sites and for the most part most of them had no idea about this data privacy shield issue. The ones that did pretty much shrugged and said they will take their chances working under legal environments they don’t fully understand. I can’t help but feel that if more designers actually understood how confusing this situation was they too would be wary. But it feels very much to me like we are left hanging and not much noise has been made at all.
Out of the whole group of people I spoke to, only one person actually had looked into this stuff, they were a youtuber and they had to admit that they have stopped working with Webflow professionally too as it is just too vague right now.
If this issue had been affecting US designers I feel like it would have been addressed by now.
I know that is not associated with Webflow directly but I have found nice article I personally have found helpful to get some basic understanding of this problem and what can be done. There is no mentioned data encryption, but it make sense to me that it can help. This page has Language options.
Here is a resource that provides in-depth information about Privacy Shield invalidation – everything you need to know and what to do now - Iubenda. While not specific to Webflow, it does help you understand the situation and options.
Can you not read us and give us an exec summary 
I do offer Iubenda services as a partner of theirs. Simple this is not.
installed their cookie thing on my site only the other week, seems a nice system.
I posted this thread at the beginning of autumn and I am happy to see that so many people have participated since.
As I said in the beginning of the thread, I am not a lawyer and believe it or not, I haven’t become one since September . However I have researched different solutions for this issue and here is an idea for our problem.
So, from my limited understanding, EU businesses will not be allowed to transfer data of EU users outside of the EU. So we have to find a way to collect user data by keeping it on European soil and not send it to the US (which happens at the moment when someone submits a Webflow form)
I found this service called userlike.com . It is an Intercom competitor but can be used as a traditional form if there is no customer support rep available online. What’s great about them? They are based in Germany and so are their servers. In addition to that, they are fully GDPR compliant.
Therefore, a solution to our problem would be to replace Webflow forms with a UserLike chatbox for our visitors to contact us. Here is a screenshot from their homepage:
I hope that my thought process is correct (again… designer here not lawyer) and that this might help someone 
Merry Christmas everyone!
Has there been any movement on this? I see the wishlist item has over 3,000 votes now
https://wishlist.webflow.com/ideas/WEBFLOW-I-3429?return_to_action=vote_6886035779382514416
Really an EU-hosted option, as suggested by Webflow themselves 4 years ago would be the best option - anything happening in this regard?