Hacker News new | ask | show | jobs
by AVTizzle 3339 days ago
There's a few comments here pointing out their rules for wiping company data from devices when traveling through customs.

As a frequent international traveler, I feel naive here... can anyone point out any resources as to why this is best practice? What's on the line here, and what's going on that we need to be aware of?

2 comments

The EFF has an excellent guide on this that goes through all of the details[0].

[0]: https://www.eff.org/wp/digital-privacy-us-border-2017

Well it's probably a lot simpler than you think. If you carry it through Customs then it is subject to search. If you don't carry it through Customs then you can be searched, and you're not disclosing any proprietary company data. Easy peasy.

For any company that has external NDA obligations, this seems like a no-brainer to make legal compliance very easy. You don't want to disclose your proprietary company data, well then make a policy that says don't put proprietary company data in a position where it is likely to be subject to legal searches without any strong requirement for a warrant (probably a very short list of situations, maybe just when passing through Customs.) Now you can sign NDAs and pass through customs too, and don't worry about any potential that a conflict between the two could put you in a precarious legal position.

Customs has very broad legal latitude to perform invasive searches on a whim. (Here in the US, I don't think I even need to pass through customs to be subjected to invasive searches like this when passing through an airport.)

That makes Johnny Mnemonic sound a little less crazy.