5 ms·
If confirmed, this implies that the use of any provider that could in theory bring the data to a third country should be avoided.
by dariosalvi78 5y ago
If confirmed, this implies that the use of any provider that could in theory bring the data to a third country should be avoided.
- marginalia_nu 5y agoThat's largely already a consequence of Schrems II.
- tiedemann 5y agoIf that third country has something like the CLOUD Act, then yes.
- speedgoose 5y agoIt's actually already the case but everyone prefers to put their heads in the sand and hope for the best. It's not like we have real alternatives to AWS or Azure in Europe right now.
- dmitriid 5y agoAWS/GCP/Azure are very keen on keeping the business in Europe, so they have European datacenters, try to keep them GDPR-and-other-laws-compilant, and will even sign a legally binding agreement with you swearing to keep all data on EU servers only.
- speedgoose 5y agoYeah they do that. But at the same time they have the patriot act law to respect, and the European privacy shield is dead. So right now it's challenging to know whether using Azure is GDPR compliant or not. Most people I talked with on this topic think it's probably not compliant, but they prefer to wait and pay a fine if necessary as they are not lawyers.
- kall 5y agoThe Azure service fully operated by Deutsche Telekom seems pretty appealing right about now, but as far as I know they cancelled that. Maybe cloud providers will move to a kind of franchise model, effectively allowing smaller European companies to license an Outposts type software.
- Dave3of5 5y agoOvh and scaleway?
- speedgoose 5y agoScaleway still lacks a lot of features but has potential on the long term. OVH lacks many features too, and quality.
- f1refly 5y agoActually it's pretty explicitly only about transferring data to providers which are under authoritan legislations.