[dj_mc_merlin]

None unless you want to:

1. Get sued

2. Get a court order to backdoor your encryption

3. Get your doors bashed in by police for non compliance, everything seized, and a criminal case coming your way

It's not like one company can fight its own government.

[eptcyka]

You get sued - so what? The most they can risk is the ability to have a UK based payment processor bail on them - they can still have customers in the UK, but they'd have to pay via a VPN.

[dj_mc_merlin]

I think you misunderstand, I was talking about a UK based company. If the Companies House decides to rescind your registration -- you are no longer a company. That is what you risk.

You don't actually need a real address in the UK to open a company there, an address at one of those virtual offices is enough, so you could conceivably avoid the criminal case (if you live in a country that won't extradite you!). What you couldn't avoid is the UK telling you that you are no longer allowed to be a UK registered company, which is obviously within their rights to do.

[eptcyka]

That's fair.

[Shish2k]

> You get sued - so what?

Would I be right in assuming that you’ve never been on the receiving end of a government-scale lawsuit?

[eptcyka]

The UK can only ask Germany to 'do something about it'. Courts apply to entities over which they have jurisdiction. UK isn't even in the EU anymore, they have no power over a German mail company.

[danaris]

The OP of the thread specifically asked what options are available to organizations in the UK.

If you're operating in the UK, your operations there must, naturally, be subject to UK law.

[varispeed]

It can have reach similar to GDPR, when if German company serves UK customers, they will have to comply.

[supermatt]

The UK has no jurisdiction in Germany - they are separate sovereign states. It would be up to the UK to prevent them serving UK customers, because - as long as their own government dont interfere - they could just ignore any demands. This is just as true for the GDPR.