"Personal Identifying Information (PII) is transfered to a server that is under control of a company in an unsecure noneuropean country. The server location doe

"Personal Identifying Information (PII) is transfered to a server that is under control of a company in an unsecure noneuropean country. The server location doesn’t count, it is about where the company deciding about the data resides." I find problematic that such a restriction is in place, what of PII was sent to a European company, is that a problem? What if the ownership of the company changes? This kind of data localization requirements go against the concept of an open internet.