[djoldman]

> Under the US Cloud Act, American companies are required to hand over all information they store to the government if requested to do so, even if it is stored abroad.

Hrm. It's my understanding that a US company is required to give almost no data to any government without a warrant.

[graemep]

True, but a US warrant. So if data is stored on a system in another country owned by an American company, they can be compelled to hand the information to the US government even if it is illegal to do so according to the law of the country where in the information is stored.

So, for example, a lot of medical information stored on AWS by the NHS could be obtained by the US government. So could a lot of financial and government data around the world. Zoom calls, Teams meetings, emails sent to GMail. Google Drive and one Drive document. Lots and lots more.