Re:Does US have right to data on overseas servers?
by candiodari on Saturday June 24, 2017 @10:17AM
(#14625645)
People should just once and for all assume that any data you have that is hosted on a drive that isn't encrypted OR has encryption, but you don't have exclusive control of the keys (e.g. all the cloud products) can and will be used :
(note that exclusive control of the keys means it can't be on a virtualized server shared with anyone)
1) in any court case against you or anyone else it might be relevant to. It does not have to be a criminal case (translation: you don't have to have done anything against the law, a mere commercial disagreement will do). This is especially true of divorce cases, but also for others.
2) This means that this data is no longer covered under the right to avoid self-incrimination in criminal cases in the US. Your Gmail/Outlook/Office 365 documents ... cannot be held from any court, no matter how much you disagree.
3) "to further the strategic interests of the US and it's allies" is the term, I believe. Essentially, anything one of the three letter agencies.
4) The way corporations are responding to this is to delete any and all mail, documents, ... after 2-3 months unless it's specifically marked to keep. Also, as soon as someone leaves the company, the duration is reduced, to avoid incriminating themselves.
(note that exclusive control of the keys means it can't be on a virtualized server shared with anyone)
1) in any court case against you or anyone else it might be relevant to. It does not have to be a criminal case (translation: you don't have to have done anything against the law, a mere commercial disagreement will do). This is especially true of divorce cases, but also for others.
2) This means that this data is no longer covered under the right to avoid self-incrimination in criminal cases in the US. Your Gmail/Outlook/Office 365 documents ... cannot be held from any court, no matter how much you disagree.
3) "to further the strategic interests of the US and it's allies" is the term, I believe. Essentially, anything one of the three letter agencies.
4) The way corporations are responding to this is to delete any and all mail, documents, ... after 2-3 months unless it's specifically marked to keep. Also, as soon as someone leaves the company, the duration is reduced, to avoid incriminating themselves.