With restrictions under the Data protection Act 1998 limiting the cross bordering of personal data Forrester have released a map to highlight individual country legislation and compliance with EU adequacy tests. see http://www.forrester.com/cloudprivacyheatmap

It is also worth checking out the ICO website as it clarifies the US position, (which is only deemed adequate if the recieving company has signed up to the Safe Harbor Scheme