TL:DR - You can’t with private information, unless the private user CLEARLY agrees to it.
I don’t think you know how GDPR works.
EU satellite does not mean European Union only countries it means Europe though, two slightly different things, and I have seen plenty of posts of people using VPN to circumvent geoblocking.
With GDPR clearly states, even encrypted personal data, has to be in the EU (has in European Union) or in countries that have SCC
and the provider of said backups service needs to be under GDPR has well,
OR unless it is clearly stated and informed to the private user that it can be transffered outside of the EU to a partner for backups
But any transfer outside of the EU without either of these is a guaranteed fine.
As far as I can tell, there are no other exceptions.
There has been several cases of these, even backups with encryption, the moment it got out the European Union and they found out, it was hefty fine.
Even if I did double encryption, meaning I encrypted first and than transfer to storj and there goes another round of encryption it would not be under the GDPR, now for what I understand Storj cannot guarantee that the data will be under GDPR jurisdiction, technically this is impossible, it’s not how Storj works with the independent node operators.
But this is not an isolated issue, i.e. Google had a hell of an big issue, because US law states or at least stated that any US company has to give away data that they request no matter on what country the data is residing, GDPR prevents that…
that was until 2023 the US and the EU now have DPF agreement and that is another rollercoster of legal complexity, that I need to understand.
https://www.dataprivacyframework.gov/Program-Overview