Austrian DPA Ruling Against Google Paves the Way to EU-Based Cloud Services • Hacker News Board

Re: Austrian DPA Ruling Against Google Paves the Way to EU-Based Cloud Services

#11

Post by spaniard89277 » Tue, Feb 01, 2022, 11:30 AM UTC

7steps2much wrote: post #9

rini17 wrote: post #8

Earlier quoted context omitted.

To me it reads as only walling the data off is insufficient. They will have to incorporate in Europe or in jurisdiction without FISA-like laws and completely split whole operation there.

I believe that it would come down to this as well. The problem is both them being located in the US AND being a US company. Alternatively they could mirror an approach that Microsoft had with ther Office Online for a while, that is find a European company acting as "trustee" for the data, so that even if the NSA came knocking the US based company would not have any data on any of their infrastructure it could give th…

But this is only viable for very large companies.

Re: Austrian DPA Ruling Against Google Paves the Way to EU-Based Cloud Services

#12

Post by zxienin » Tue, Feb 01, 2022, 11:31 AM UTC

The title sounds to a general impact ("..Paves the Way to EU-Based Cloud Services").

But on closer read, it seems to partially apply to SaaS/PaaS cloud services, which hold data outside EU.

Google also provides IaaS/PaaS cloud offering based within EU as well [0].

[0]: https://cloud.google.com/about/locations#europe

Re: Austrian DPA Ruling Against Google Paves the Way to EU-Based Cloud Services

#13

Post by perch56 » Tue, Feb 01, 2022, 11:31 AM UTC

rini17 wrote: post #8

DaiPlusPlus wrote: post #7

Earlier quoted context omitted.

Nah, what happens is the US-based companies will just geo-wall the data and throw more money at their EU-based AWS and Azure regions.

To me it reads as only walling the data off is insufficient. They will have to incorporate in Europe or in jurisdiction without FISA-like laws and completely split whole operation there.

Yep, you’re spot on with this. Even with a geo-wall AWS or Microsoft are still US based companies that have to comply with a FISA order. I work for a SaaS and we’re continuously questioned by our customers about this but we can’t do much as everything we have is architected around one particular US based cloud provider. We tried HYOK/BYOK/EU entity, so both security and legal controls which are insufficient today.

Re: Austrian DPA Ruling Against Google Paves the Way to EU-Based Cloud Services

#14

Post by technion » Tue, Feb 01, 2022, 11:32 AM UTC

sirwitti wrote: post #3

This is already affecting websites and web apps. At least all of our customers are moving away from Google Analytics and many try to also get rid of other Google services like fonts and maps. I'm very interested to see what this changes in other european countries.

Analytics and fonts shouldn't be too hard. What about Captcha?

Re: Austrian DPA Ruling Against Google Paves the Way to EU-Based Cloud Services

#15

Post by slig » Tue, Feb 01, 2022, 11:37 AM UTC

spaniard89277 wrote: post #11

7steps2much wrote: post #9

Earlier quoted context omitted.

I believe that it would come down to this as well. The problem is both them being located in the US AND being a US company. Alternatively they could mirror an approach that Microsoft had with ther Office Online for a while, that is find a European company acting as "trustee" for the data, so that even if the NSA came knocking the US based company would not have any data on any of their infrastructure it could give th…

But this is only viable for very large companies.

One might think that all these extra regulations benefits only the giants and curbs any newcomers.

Re: Austrian DPA Ruling Against Google Paves the Way to EU-Based Cloud Services

#16

Post by rpadovani » Tue, Feb 01, 2022, 11:39 AM UTC

jacquesm wrote: post #10

If there is ever going to be an EU version of a GoFundMe for a statue for Schrems I'm in. It's one thing to have good privacy laws, it's quite another to get them enforced. As public service comes this a fantastic job for all of us.

You should support Noyb then, the no-profit he works for! https://noyb.eu/en

I am not affiliated, but I am a massive supporter of them and is one of the donations I am happier to give

Re: Austrian DPA Ruling Against Google Paves the Way to EU-Based Cloud Services

#17

Post by simion314 » Tue, Feb 01, 2022, 11:40 AM UTC

spaniard89277 wrote: post #11

7steps2much wrote: post #9

Earlier quoted context omitted.

I believe that it would come down to this as well. The problem is both them being located in the US AND being a US company. Alternatively they could mirror an approach that Microsoft had with ther Office Online for a while, that is find a European company acting as "trustee" for the data, so that even if the NSA came knocking the US based company would not have any data on any of their infrastructure it could give th…

But this is only viable for very large companies.

This means US government should pass laws to protect EU citizens data, if they feel generous they could apply it to every person regardless of his citizenship,

Re: Austrian DPA Ruling Against Google Paves the Way to EU-Based Cloud Services

#18

Post by iqanq » Tue, Feb 01, 2022, 11:44 AM UTC

All of this is similar to what China did back in the day. It helped foster an ecosystem for their own services, but of course they were (and are) of a lower quality.

Re: Austrian DPA Ruling Against Google Paves the Way to EU-Based Cloud Services

#19

Post by iamacyborg » Tue, Feb 01, 2022, 11:44 AM UTC

technion wrote: post #14

sirwitti wrote: post #3

This is already affecting websites and web apps. At least all of our customers are moving away from Google Analytics and many try to also get rid of other Google services like fonts and maps. I'm very interested to see what this changes in other european countries.

Analytics and fonts shouldn't be too hard. What about Captcha?

Or things like Stripe’s anti fraud js script.

Re: Austrian DPA Ruling Against Google Paves the Way to EU-Based Cloud Services

#20

Post by litgab » Tue, Feb 01, 2022, 11:45 AM UTC

technion wrote: post #14

sirwitti wrote: post #3

This is already affecting websites and web apps. At least all of our customers are moving away from Google Analytics and many try to also get rid of other Google services like fonts and maps. I'm very interested to see what this changes in other european countries.

Analytics and fonts shouldn't be too hard. What about Captcha?

The directory linked in the article actually contains a captcha service called FriendlyCaptcha: https://www.developedin.eu/item-detail?recordId=recG9DsaUnGd...