Hacker News new | ask | show | jobs
by intunderflow 1405 days ago
And slowly but surely the tidal wave of the consequences of GDPR versus the CLOUD Act come into view.

It will take many years to of delays and fretting (due to the dependence on US clouds) but fundamentally the current legal position is that GDPR is fundamentally incompatible with any personal data transfer to the USA, that's how Google Analytics keeps getting banned too.

At some point this will all come to a head and something will have to budge given the gigantic consequences of such a position, from AWS to GCP to Stripe to even basic things like your Domain Registrar.

3 comments

The cloud providers can work with independent operators that run their cloud solutions in Europe. Basically an on-premise setup, just on a huge scale.

Microsoft initially did this for Azure, I believe.

Certainly will cause a lot of friction.

> The cloud providers can work with independent operators that run their cloud solutions in Europe.

Does that exempt them from the CLOUD Act? If US companies have access to independent operators in Europe, presumably they can still be compelled to give that data to the US.

But couldn't the NSA still spy on European cloud providers and domain registrars?
There is no tidal wave, Telekom partnered a long time ago with Microsoft for an EU only azure offering and it was sacked quickly because the demand from public procurements where too low since those largely require on-prem solutions.