News for hackers. Stuff that matters.

A comment on US Cloud soon illegal in EU? US punches first hole in EU-US Data Deal. Parent comment

Re:US Cloud soon illegal in EU? US punches first hole in EU-... by belorn on Thursday February 06, 2025 @07:35AM (#42961774)
The trend in EU is to tighten up regulation to the point where the achieved goals occurs fairly slow and steady. The goals are also not about ownership (there is no country called Europe, so what would it even mean?), but rather that the data and control remain within the jurisdiction of EU law and then ratified by each country.

The results so far has been that most large companies has local legal presence within Europe, EU data centers, EU specific contracts with customers, and recently EU specific features in applications. It basically salami-tactics. Part of this strategy is also to use the court system to enforce specific aspects, like how part of GDPR is just now getting enforced after a case in March in 2024 by EDPS. The case initiated in 2021, GDPR was written 2016, so it also illustrate the pace. In the time between 2016 and now there are multiple new regulations, and those will also take time before they are fully enforced.

[ Parent | on HN ]
Re:US Cloud soon illegal in EU? US punches first hole in EU-... by mrtksn on Thursday February 06, 2025 @07:40AM (#42961801)
I don't know about the hidden intentions but it appears that its time to switch the cutting style from salami to ribeye or arms and legs.

>here is no country called Europe, so what would it even mean?

Soon there will be, they are creating the 28th regime which is essentially a virtual country with a jurisdiction designed for speedy bureaucracy. I hope they do a good job with the implementation of the idea.

[ Parent | on HN ]
Re:US Cloud soon illegal in EU? US punches first hole in EU-... by Sander_Marechal on Thursday February 06, 2025 @09:54AM (#42962925)
> but rather that the data and control remain within the jurisdiction of EU law

The fundamental problem is that EU and US law are incompatible. FISA allows the US to access any data from any US company no matter where it is located. It doesn't matter that the data is located in the EU, on a European server, manager by the European division of a company. As long as there exists a US parent company, FISA can compel the data. And that is fundamentally against the GDPR.

[ Parent | on HN ]