. . . . "However, for entities such as cloud storage providers and subcontractors that may have no???or incomplete???preexisting compliance obligations, the impact is significant." .