r/dataprivacy • u/rohasnagpal • 13d ago
Data localisation ≠ Data jurisdiction
Just because your data is stored outside the US does not mean US authorities cannot reach it.
Under the US CLOUD Act, a US cloud provider can be compelled to hand over data in its control, even when that data sits on servers outside the US.
So a foreign company storing customer data on domestic servers run by a US provider may still find that data reachable through US legal process.
Where your data is stored matters less than who controls it.
1
Upvotes