3 ms·
Yes but there are restrictions on holding data of citizens within servers hosted in another country. And there is a trend to segment users into systems hosted w
by joewee 8y ago
Yes but there are restrictions on holding data of citizens within servers hosted in another country. And there is a trend to segment users into systems hosted within that country designed to adhere to their requirements. The end goal is data on their citizens are more easily obtainable by local government.
- themihai 8y agoRenting some servers in Europe is not that a big problem. What prevents foreign companies from using AWS-EU region and then foreign governments (i.e. US) from accessing it? >> The end goal is data on their citizens are more easily obtainable by local government. I think this is a sensible requirement, don't you think? What makes the U.S. gov more eligible than the local gov to access their citizens data? It's not only a national security issue, it's a local police issue as well(i.e. finding criminals based on their digital fingerprints). The current situation is quite ridiculous if you think about it. You can't have global services without a global "police". As we don't have a global police(yet) local gov try to make these global companies to store data locally.
- joewee 8y agoIt is a sensible requirement but it will require a major shift in how companies think about what data it collect and what will the storage retention policies. Siginicant data collected on individuals across the world via social media are held with US companies that must follow the processes put in place to provide Law Enforcement with data regardless of the citizenship of the person, when someone commits a crime in one jurisdiction, that local law enforcement has the right to collect from the business, data needed to support their case. The problem is when Bob from country X commits a crime "social media business" may have relevant information on, how cooperative will the US company be in helping country X? Especially if country x is politically unpopular at the moment. Require local subsidiaries follow data protection and retention that adheres to local law. Everything gets much easier. Another issue, "social media business" has a tone of information on citizens of country X, now the citizens of country X are vulnerable to manipulation which could disrupt the stability of country X. What do they do?