5 ms·

This is absolutely not what's happening here though. Facebook absolutely could keep the data within the EU, they just think it's more profitable to move UK user

This is absolutely not what's happening here though. Facebook absolutely could keep the data within the EU, they just think it's more profitable to move UK user data to California. Now, it's a valid question as to why the UK would allow their constituents most personal data to be transferred out of their jurisdiction, but that's up to the UK government. Facebook exists in hundreds of jurisdictions, it's not rare for them to move user data out of a jurisdiction or intio a jurisdiction. It's almost unique that a govenrment encourages that by reducing regulation though.

ku-man 6y ago
The UK can't and won't fight US (in any matter)
dheera 6y ago
Would it be possible to store data in a cryptographically decentralized way to stop giving meaning to "where" a data is stored? Or maybe even just XOR it with a random key, put the result in the UK and put the key in the US. That way neither US nor UK has "personal data" -- independently each country just got a pile of white noise -- but the two countries together do have it, and they wouldn't be able to say who "really" has it.
- 8note 6y ago
  The government can just hold the locals in prison until the decrypted data is provided
  - deleted 6y ago
    [deleted]
  - azalemeth 6y ago
    This is literally the law in the UK at the moment: https://www.theregister.com/2007/10/03/ripa-decryption_keys_power/ https://www.theregister.com/2007/10/03/ripa-decryption_keys_...
- mfer 6y ago
  This issue isn't a case of what is technologically feasible. This is about what's profitable and within legal policies of a country they are operating in. Where data is stored is sometimes an issue of jurisdiction policy (laws). Think of this as a separation between requirements (what) and implementation (how)
  - dheera 6y ago
    I suppose, but law has to be governed by written documents, and part of technology's job is to advance society by identifying and operating in the loopholes of those written documents. What does the written law define as "where data is stored"?
nomel 6y ago
> why the UK would allow their constituents most personal data to be transferred out of their jurisdiction Are there limitations with using products/doing business outside the UK, from within the UK? As in, is there any authority that they could use to stop people from, willingly(?), using a foreign internet service? It seems that would require some pretty draconian internet policies.
- lmm 6y ago
  There are, quite rightly, strict rules about how companies handle personal data (and that includes not transferring it to jurisdictions where those rules don't apply). I don't think any of those rules apply to individuals handling their own personal data.
remus 6y ago
Maybe I've misread the article, but I didn't see anything about Facebook transferring user data to the US. What has changed is that FB users in the UK will be agreeing to terms with Facebook Inc in California rather than Facebook Ireland. I suspect this is because the UK has a data sharing agreement with the US, but when Brexit kicks in there is not a legal mechanism in place for easy transfer of data from the EU to the UK (which makes your life hard if you're a company based in Ireland and you need to send data to the UK.)

ku-man 6y ago

The UK can't and won't fight US (in any matter)

dheera 6y ago

Would it be possible to store data in a cryptographically decentralized way to stop giving meaning to "where" a data is stored? Or maybe even just XOR it with a random key, put the result in the UK and put the key in the US. That way neither US nor UK has "personal data" -- independently each country just got a pile of white noise -- but the two countries together do have it, and they wouldn't be able to say who "really" has it.

8note 6y ago
The government can just hold the locals in prison until the decrypted data is provided
- deleted 6y ago
  [deleted]
- azalemeth 6y ago
  This is literally the law in the UK at the moment: https://www.theregister.com/2007/10/03/ripa-decryption_keys_power/ https://www.theregister.com/2007/10/03/ripa-decryption_keys_...
mfer 6y ago
This issue isn't a case of what is technologically feasible. This is about what's profitable and within legal policies of a country they are operating in. Where data is stored is sometimes an issue of jurisdiction policy (laws). Think of this as a separation between requirements (what) and implementation (how)
- dheera 6y ago
  I suppose, but law has to be governed by written documents, and part of technology's job is to advance society by identifying and operating in the loopholes of those written documents. What does the written law define as "where data is stored"?

nomel 6y ago

> why the UK would allow their constituents most personal data to be transferred out of their jurisdiction Are there limitations with using products/doing business outside the UK, from within the UK? As in, is there any authority that they could use to stop people from, willingly(?), using a foreign internet service? It seems that would require some pretty draconian internet policies.

lmm 6y ago
There are, quite rightly, strict rules about how companies handle personal data (and that includes not transferring it to jurisdictions where those rules don't apply). I don't think any of those rules apply to individuals handling their own personal data.

remus 6y ago

Maybe I've misread the article, but I didn't see anything about Facebook transferring user data to the US. What has changed is that FB users in the UK will be agreeing to terms with Facebook Inc in California rather than Facebook Ireland. I suspect this is because the UK has a data sharing agreement with the US, but when Brexit kicks in there is not a legal mechanism in place for easy transfer of data from the EU to the UK (which makes your life hard if you're a company based in Ireland and you need to send data to the UK.)