4 ms·
Of course it's unthinkable for people working for the provider to have access to production data except in very specific, highly audited situations. But it's a
by tallanvor 4y ago
Of course it's unthinkable for people working for the provider to have access to production data except in very specific, highly audited situations.
But it's absolutely understandable that an organization has administrators that are able to access data for legal or other compliance reasons, and Google provides those tools as part of the service they provide. There's nothing sketchy about this from Google's side.
The Dutch order is more concerned with whether or not data regarding students is being transferred to the US and processed in ways that it shouldn't be. --Which there's no indication that this is happening, as far as I can tell.
- twiss 4y agoRegarding the last point, there is some indication that that is happening, given that Google's response (from the article) is: > Google has indicated that it plans to fix the privacy concerns by August 2023 which means that they acknowledge that the current situation is insufficient. If the data was stored and processed only in Europe, they would likely say so. Although even that would not be sufficient, because > American authorities can access data stored in the European cloud (by American companies), due to the CLOUD act. So the privacy issues aren't that easy to solve, which might be why they expect it to take >1 year.