3 ms·
An old (school sysasmin) or an (old school) admin? FWIW in a lot of SaaS companies having read access to production data for regular workflows is absolutely un
by underwater 4y ago
An old (school sysasmin) or an (old school) admin?
FWIW in a lot of SaaS companies having read access to production data for regular workflows is absolutely unthinkable. In my opinion the users who expect that their private communication is not read have it right.
- tallanvor 4y agoOf course it's unthinkable for people working for the provider to have access to production data except in very specific, highly audited situations. But it's absolutely understandable that an organization has administrators that are able to access data for legal or other compliance reasons, and Google provides those tools as part of the service they provide. There's nothing sketchy about this from Google's side. The Dutch order is more concerned with whether or not data regarding students is being transferred to the US and processed in ways that it shouldn't be. --Which there's no indication that this is happening, as far as I can tell.
- twiss 4y agoRegarding the last point, there is some indication that that is happening, given that Google's response (from the article) is: > Google has indicated that it plans to fix the privacy concerns by August 2023 which means that they acknowledge that the current situation is insufficient. If the data was stored and processed only in Europe, they would likely say so. Although even that would not be sufficient, because > American authorities can access data stored in the European cloud (by American companies), due to the CLOUD act. So the privacy issues aren't that easy to solve, which might be why they expect it to take >1 year.