This is going to be a shit storm. The CJEU has ruled that US owned storage is not “adequate protection” under EU data protection laws and that their laws around warrants are not an “effective remedy”. They have torn up the so-called self-harbour treaty. Here are some links.
The hyperbolic,
- https://www.techdirt.com/articles/20151002/22252332432/coming-collision-between-eu-privacy-regulation-american-free-speech.shtml
- http://www.theregister.co.uk/2015/10/06/silicon_valley_after_max_schrems_safe_harbour_facebook_google_analysis/
- http://www.theregister.co.uk/2015/10/07/us_cloud_giants_privacy_brief_safe_harbour/
I saw it coming,
- http://www.citihub.com/insights/our-blog/conflicting-data-requirements-privacy-versus-gatca/
- https://www.linkedin.com/pulse/20141104150839-2916698-privacy-transparency-compliance which includes pointers to commentary on the FBI/Microsoft case
- http://blog.davelevy.info/2014/11/27/coming-privacy-law/
and here’s the law
- http://arstechnica.co.uk/tech-policy/2015/10/europes-highest-court-strikes-down-safe-harbour-data-sharing-between-eu-and-us/
- https://ico.org.uk/for-organisations/guide-to-data-protection/data-protection-principles/
- http://www.out-law.com/en/articles/2015/october/why-model-clauses-and-bcrs-will-also-be-in-question-if-cjeu-quashes-eu-us-data-transfers-safe-harbour/
- http://www.out-law.com/en/articles/2015/october/the-cjeus-safe-harbour-ruling–the-questions-and-answers-in-the-aftermath/
and here’s the ICO advice on the ruling