Hacker News new | ask | show | jobs
by chris_explicare 36 days ago
What's missing here is the extraterritorial angle. The Cloud Act lets US authorities compel Apple and Google to hand over user data worldwide, including EU residents who assumed GDPR covers them. It doesn't. Apple and Google are US companies, and GDPR Article 48's restrictions on foreign court orders don't apply to them. Those 100k users almost certianly include Europeans with no idea their download history was reachable by the DOJ.