7 ms·
Interestingly, it's not actually about being in the EU specifically, it's just about being in a jurisdiction with equivalent data protections. It's not a "must
by pimterry 5y ago
Interestingly, it's not actually about being in the EU specifically, it's just about being in a jurisdiction with equivalent data protections. It's not a "must be EU" cloud requirement, it's a "must not be USA" requirement.
Canada, Brazil, Japan, India, and many other non-EU countries have GDPR-like data protection regulation that would be totally acceptable I think (IANAL).
The core problem is USA specific - either the USA needs to implement serious data protection laws where they can't blanket surveil foreign user's data, or EU businesses will have to move elsewhere.
I wouldn't be surprised if in future, similar local rulings appear in Canada/Brazil/Japan/Indian/the rest of the world for businesses based there too. It might be a difficult few years for US-based cloud providers.
- kazen44 5y agoand this is exactly what makes the EU a player in geopolitics. This kind of soft power even has a name, the brussels effect[0] 0: https://en.wikipedia.org/wiki/Brussels_effect https://en.wikipedia.org/wiki/Brussels_effect
- floatingatoll 5y agoNote that the US is absolutely capable of passing a data protection law at any time. I wouldn’t hold my breath, though.
- arlort 5y ago> that would be totally acceptable There needs to be an official adequacy decision, it's not automatic https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en https://ec.europa.eu/info/law/law-topic/data-protection/inte... Canada is indeed covered by one such decision
- pimterry 5y agoAh, good info, thanks! Looks like the full list of 'already approved as adequate' countries for data protection is: - Andorra - Argentina - Canada (commercial organisations) - Faroe Islands - Guernsey - Israel - Isle of Man - Japan - Jersey - New Zealand - Republic of Korea - Switzerland - the UK - Uruguay 2022 is a great year to be a cloud provider based in any of those.