Feeds

Privacy winds blow through Clouds towards Switzerland

Safe haven guaranteed?

The Essential Guide to IT Transformation

Opinion Cloud services are one of the major changes to the way companies use computing services, but the weather may be changing as a consequence of increasing activity of European Data Protection watchdogs.

Whereas US citizens and companies have to contend with ever decreasing rights to privacy, EU companies will come under pressure from Data Protection regulators keen to show their independence (as Google has discovered). This will create a demand for assurances.

Companies that do not want to fall foul of privacy regulations have a problem: the legislative anti-terror backdoors installed post 9/11 offer authorities easy access, but provide for little transparency in how those rights are used or what happens to the data afterwards, and they exist in European law too.

In the UK alone, fairly public events have shown that not only such legislation will be abused, even more so when those who are supposed to guard against abuse are in collusion with those who break the law.

The result will be a continued search for a safe haven for any company that requires confidentiality. There are plenty companies that need it: organisations with interesting IP and any entity that handles truly private data such as law firms, medical practices, private banks and finance advisers.

Unsafe harbour

Companies with links to the US will have to prove they are not simply shipping all data to the US, and this may prove impossible. The lack of oversight and control over use of the US PATRIOT Act renders the whole Safe Harbor agreement effectively meaningless, yet companies without such links will only have local legal leverage available as an offset to the risks posed by laws that effectively seek to bypass due process. Europe may be safer, but not safe.

Companies with intelligent lawyers will eventually discover that cross-jurisdictional IT deployment offers the only route to secure storage. For example, they can avoid the EC legal risks by hosting in Switzerland. This creates a two-pronged safety net for abuse of intercept facilities: not only will an international request for assistance create a visible audit trail, Swiss laws are also stricter when it comes to standards of evidence and containment of any information gleaned during an investigation, thus frustrating abuse and returning due process to investigations.

Continuing the Swiss theme, last year has also seen a hardening of the Swiss stance against data theft. They will no longer collaborate with investigations where evidence has been sourced by means considered illegal under Swiss law, which makes the nation all the more attractive as a new data haven for European organisations.

US as well as European law makers will have to find ways to demonstrate that they use their powers responsibly, with more transparency of their use of special powers as a good first step. Otherwise, pressure groups such as Anonymous and Wikileaks will see a continued justification of their existence. A jurisdiction that seeks to avoid due process should not be surprised when its citizens start to ask:

What do they have to hide?

Peter Houppermans is a privacy and IT security expert based in Switzerland.

Build a business case: developing custom apps

More from The Register

next story
Scotland's BIG question: Will independence cost me my broadband?
They can take our lives, but they'll never take our SPECTRUM
Bring back error correction, say Danish 'net boffins
We don't need no steenkin' TCP/IP retransmission and the congestion it causes
Auntie remains MYSTIFIED by that weekend BBC iPlayer and website outage
Still doing 'forensics' on the caching layer – Beeb digi wonk
NBN Co adds apartments to FTTP rollout
Commercial trial locations to go live in September
Samsung Z Tizen OS mobe is post-phoned – this time for good?
Russian launch for Sammy's non-droid knocked back
Telstra to KILL 2G network by end of 2016
GSM now stands for Grave-Seeking-Mobile network
Seeking LTE expert to insert small cells into BT customers' places
Is this the first step to a FON-a-like 4G network?
What FTC lawsuit? T-Mobile US touts 10GB, $100 family-of-4 plan
Folks 'could use that money for more important things' says CEO Legere
prev story

Whitepapers

Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
The Essential Guide to IT Transformation
ServiceNow discusses three IT transformations that can help CIO's automate IT services to transform IT and the enterprise.
Consolidation: The Foundation for IT Business Transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.
How modern custom applications can spur business growth
Learn how to create, deploy and manage custom applications without consuming or expanding the need for scarce, expensive IT resources.
Build a business case: developing custom apps
Learn how to maximize the value of custom applications by accelerating and simplifying their development.