News for hackers. Stuff that matters.

A comment on Dutch DPA fines Uber 290M euro because of transfers of drivers' data to the US. Parent comment

Re:Dutch DPA fines Uber 290M euro because of transfers of dr... by Y_Y on Monday August 26, 2024 @10:14AM (#41357328)
In fact were talking about a Dutch company, Uber BV. If it can't abide by EU law then it shouldn't exist!

And does US law really prevent them from handling EU customer data in a compliant way? Could you give a specific example?

[ Parent | on HN ]
Re:Dutch DPA fines Uber 290M euro because of transfers of dr... by acedTrex on Monday August 26, 2024 @10:19AM (#41357375)
You could argue that the CLOUD act is in direct conflict with European data laws.

https://en.wikipedia.org/wiki/CLOUD_Act

However, it does not prevent data at rest being stored in the EU. Only that if requested the american company has to exfiltrate it to the states.

[ Parent | on HN ]
Re:Dutch DPA fines Uber 290M euro because of transfers of dr... by Y_Y on Monday August 26, 2024 @10:37AM (#41357565)
Thanks, it seems like indeed the US government could request that an EU subsidiary of a US entity provide data on an EU subject. This request could be lawful under US law but not EU and hence you'd have a conflict.

https://www.edps.europa.eu/sites/default/files/publication/1...

[ Parent | on HN ]