Can a US company be forced to hand over records stored in the EU during litigation?

In most cases, yes. A U.S. court generally can compel a company subject to its jurisdiction to produce records it owns or controls, even when the data physically sits on servers in the European Union. The key legal concept is “possession, custody, or control” — not where the bytes happen to reside. If a U.S. entity (or its foreign affiliate under its direction) can access the records, a court may order their production in discovery.

Why location alone is not a shield

Storing data abroad does not automatically place it beyond a court’s reach. What matters is whether the litigant has the practical and legal ability to obtain the records. Multinational organizations are frequently ordered to retrieve EU-hosted data because they control it through corporate structure, contracts, or cloud administration rights.

The conflict with EU data-protection law

The complication is that EU law — chiefly the General Data Protection Regulation (GDPR) — restricts transferring personal data outside the EU and limits processing it for foreign legal proceedings. This creates a genuine tension:

• A U.S. court may order production.
• EU rules may forbid an unrestricted transfer of the same personal data.

Courts weigh these competing obligations. They often consider the importance of the information, the hardship of compliance, whether the data could be obtained another way, and the good faith of the party. A “blocking statute” or data-protection law may be a factor, but it rarely excuses production entirely on its own.

How disputes are typically resolved

Parties usually manage the conflict through practical, cooperative steps rather than outright refusal:

• Narrowing requests to what is truly relevant and proportionate.
• Redacting or pseudonymizing personal data before transfer.
• Processing or reviewing data within the EU where feasible.
• Using protective orders and lawful transfer mechanisms.
• Negotiating the scope early, before disputes escalate.

The records-management takeaway

Knowing where your records live — and who controls them — is essential. Sound information governance, defensible retention schedules, and a clear litigation-hold process help an organization respond quickly and credibly when cross-border demands arise.

For related guidance, see the FOIA and public records hub.

This answer is general information, not legal advice; consult qualified counsel for any specific matter.